Lucio Sá

CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover

Education Center | LMS & Online Courses WordPress Theme <= 3.6.10 - PHP Object Injection

VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection

RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection

Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery

Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance

Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return

Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure

Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import