Jonas Benjamin Friedli

Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings

Library Management System <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation

Simple Registration for WooCommerce <= 1.5.8 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval

Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'

atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Execution

Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass

OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization

TableGen – Data Table Generator <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachments

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting