Raad Haddad

User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload

Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF

Export All URLs < 4.4 - Admin+ Arbitrary System File Removal

WP phpMyAdmin < 5.2.0.4 - Admin+ Stored Cross-Site Scripting

Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site Scripting

Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download

Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API

E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF

Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting

WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass