Friderika Baranyai

Case Theme User <= 1.0.3 - Authentication Bypass via Social Login

Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload

Reales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update

Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion

Vikinger <= 1.9.32 - Authenticated (Subscriber+) Arbitrary File Deletion via vikinger_delete_activity_media_ajax Function

WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion

Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'

Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval

Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload

WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation