Nir Yehoshua

Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token

WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect

ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters

ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls

ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate

ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie

Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT

Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler

ProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override

Uncontrolled Search Path Element in Bosch IP Helper