Ivan Cese

MeetingList <= 0.11 - Authenticated (Admin+) Stored Cross-Site Scripting

Squirrels Auto Inventory <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion

Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter

PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials

Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Update

ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Upload

Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode

Solutions Ad Manager <= 1.0.0 - Unauthenticated Open Redirect via 'sam-redirect-to' Parameter

Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie