Francesco Carlucci

Scylla lite <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode

Monkee-Boy Essentials <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection

Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure

Get Post Content Shortcode <= 0.4 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via post_content Shortcode

Gutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure

Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor

Delete Custom Fields <= 0.3.1 - Cross-Site Request Forgery to Post Meta Deletion

Beauty <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via tpl_featured_cat_id Parameter