Bob Matyas

LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode

Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload

Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF

Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF

Conditional CAPTCHA <= 4.0.0 - Open Redirect

WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF

WPS Visitor Counter Plugin <= 1.4.8 - Reflected XSS via $_SERVER['REQUEST_URI']

NS Maintenance Mode for WP <= 1.3.1 - Admin+ Stored XSS

Court Reservation < 1.10.9 - Event Deletion via CSRF

Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF