Dmitrii Ignatyev

Modern Footnotes <= 1.4.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion

Official StatCounter Plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname

Ultimate Member <= 2.11.1 - Reflected Cross-Site Scripting via Filter Parameters

Maspik <= 2.5.6 - Cross-Site Request Forgery

Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'

ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions

NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'

Newsup <= 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation