Karthik Ramakrishnan

Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter

LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter

LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax

Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass

Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF

WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs

Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key

User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase

User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page

Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover