← All credits
AmrAwad
30 vulnerability records and advisories credit this contributor.
CVE-2024-3549
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
CVE-2024-11725
SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
CVE-2024-2018
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
CVE-2024-4434
LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection
CVE-2024-4319
Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure
CVE-2024-3469
GP Premium <= 2.4.0 - Reflected Cross-Site Scripting
CVE-2024-5326
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
CVE-2024-10552
Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters
CVE-2024-5324
XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update