Lucio Sá

ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions

Podlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection

WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation

Follow Us Badges <= 3.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsite_follow_us_badges Shortcode

Click Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

Yumpu ePaper publishing <= 2.0.24 - Missing Authorization to PDF Upload, Publishing, and API Key Modification

Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization

EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization

Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import