Enrico Marcolini - Claudio Marchesini - Dottor Marc

Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery

KeyWord Collector <= 1.4 - Unauthenticated Stored XSS and Settings Update via WPKeyWordSettings

SmugMug Embed <= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbums

Crowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation

Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign

AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update

click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update

click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update

click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update