Matthew Rollings

Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution

WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass

Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion

The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure

Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes

Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter

Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution

SKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgets

Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets