Jonas Benjamin Friedli

EchBay Admin Security <= 1.3.0 - Reflected Cross-Site Scripting

FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Missing Authorization to Authenticated (Subscriber+) Sync Rule Creation

NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion

WP Discourse <= 2.5.9 - Authenticated (Author+) Information Exposure

LLM Hubspot Blog Import <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Hubspot Import

简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read

Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out

Simple Page Access Restriction <= 1.0.31 - Cross-Site Request Forgery via Multiple Parameters

Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download

WP Custom Admin Login Page Logo <= 1.4.8.4 - Cross-Site Request Forgery to Settings Update