Kenneth Dunn

BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Frontend Login and Registration Blocks <= 1.0.8 - Authenticated (Subscriber+) Privilege Escalation via Password Reset

WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload

GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update

KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass

PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function

Flynax Bridge <= 2.2.0 - Unauthenticated Limited Privilege Escalation

Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover