Antonio Francesco Sardella

WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter

NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting

Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function

Newsletters <= 4.9.9.7 - Unauthenticated Stored Cross-Site Scripting

Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion

ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation

NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function

Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure