Jonas Benjamin Friedli

MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out

Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authentication to Unauthenticated Presale Update

Oceanpayment CreditCard Gateway <= 6.0 - Missing Authentication to Unauthenticated Order Status Update

Secure Passkeys <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Passkey Exposure and Deletion

Optio Dentistry <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirect

External Login <= 1.11.2 - Authenticated (Subscriber+) Sensitive Data Exposure via Test Connection

OwnID Passwordless Login <= 1.3.4 - Authentication Bypass

Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization