Dmitrii Ignatyev

Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing

PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification

Auto Featured Image <= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification

Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation

ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export

TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification

VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title

Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions

System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)

BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure