Brian Mungai

BuddyPress <= 14.3.3 - Insecure Direct Object Reference to Notifications Deletion

EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation

Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion

Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update

Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting

bbPress <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation