Kenneth Dunn

ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload

Cloud SAML SSO <= 1.0.19 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action

WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover

Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload

Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition <= 4.03.32 - Unauthenticated Login Token Generation to Authentication Bypass

SEO Metrics <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter

Administrator Z <= 2025.03.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Orion Login with SMS <= 1.0.5 - Authentication Bypass via Weak OTP

WP3D Model Import Viewer <= 1.0.7 - Authenticated (Contributor+) Arbitrary File Upload