Jonas Benjamin Friedli

Code Quality Control Tool <= 2.1 - Unauthenticated Information Exposure via Log Files

OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing

Check Plagiarism <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Binary MLM Plan <= 5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference

Zip Attachments <= 1.6 - Missing Authorization to Limited File Deletion

Mavix Education <= 1.0 - Missing Authorization to Authenticated (Subscriber+) 'Creativ Demo Importer' Plugin Activation

Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

Easy restaurant menu manager <= 2.0.2 - Cross-Site Request Forgery to Menu Upload

Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode