João Ramos Maciel

Bluff Post <= 1.1.1 - Unauthenticated SQLi via 'table_name' and 'column_name' Parameters

WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameter

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

SAMO Forms <= 1.0.0 - Unauthenticated SQLi

Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload

Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax