Karthik Ramakrishnan

GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import

GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color

GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant

Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget

Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link

GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR

GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint

GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export

Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API

Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message