Krzysztof Zając

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset

Login by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wle

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode

WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection

Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure

Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure

Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key

Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode

Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode