Chloe Chamberland

Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question

Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

Responsive Menu < 4.0.4 - CSRF to Settings Update

Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

Ninja Forms < 3.4.34 - Administrator Open Redirect