Krzysztof Zając

Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'

YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting

Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode

WordPress Header Builder Plugin – Pearl <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Easy Appointments <= 3.11.18 - Insufficient Authorization

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()

Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation

WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content

IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Export