Francesco Carlucci

Restrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token

Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure

Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Cross-Site Request Forgery

BuddyPress Members Only <= 3.4.8 - Improper Access Control to Sensitive Information Exposure via REST API

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta

XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure

Delicate <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode

Breakdance <= 1.7.2 - Missing Authorization

WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload