Friderika Baranyai

Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

Reales WP STPT <= 2.1.2 - Unauthorized User Registration

The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection

WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation

Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation

TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update

Elated Membership <= 1.2 - Authentication Bypass via Social Login

WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Deletion

WP Directorybox Manager <= 2.5 - Authentication Bypass

Golo <= 1.7.0 - Authentication Bypass to Account Takeover