Karthik Ramakrishnan

Copy & Delete Posts < 1.5.8 - Authenticated Post Publishing Restriction Bypass

Copy & Delete Posts < 1.5.8 - Authenticated Arbitrary Post Slug Takeover

Copy & Delete Posts < 1.5.8 - Authenticated Plugin Settings and Access Control Modification

ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout

Advanced Product Fields (Product Addons) for WooCommerce 1.6.22 - 1.7.3 - Unauthenticated Paid Option Surcharge Bypass via Add-to-Cart Choice Field

Defender Security < 6.4.1 - 2FA Bypass via Unthrottled OTP Verification

Defender Security 4.9.0 - 6.4.0 - Unauthenticated IP Address Spoofing via Smart IP Detection

Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter

Photo Gallery by 10Web < 1.8.49 - Contributor+ Stored XSS via watermark_url Shortcode Attribute

FV Player < 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing Authorization