Matthew Rollings

Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload

JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion

Blog, Posts and Category Filter for Elementor <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post and Category Filter Widget

Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure

One Page Express Companion <= 1.6.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via one_page_express_contact_form Shortcode

JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation

Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode