Francesco Carlucci

Schema App Structured Data <= 2.2.0 - Missing Authorization

Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection

SVG Complete <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting

Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

(Simply) Guest Author Name <= 4.34 - Authenticated (Contributor+) Stored Cross-Site Scripting

Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection

Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

GDPR-Extensions-com – Consent Manager <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export