Friderika Baranyai

JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins

Woffice <= 5.4.21 - Authentication Bypass via Registration Role

JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload

Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Ovatheme Events Manager <= 1.8.6 - Missing Authorization

Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation

简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload

CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation