Meher Sudhakar Abbireddi

WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter

LatePoint < 5.6.3 - Multiple Privileged Actions via CSRF

FunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template Importer

FunnelKit < 3.15.0.6 - Reflected XSS via Divi Optin Form

AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal

WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection

Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR

Database for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field

Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields

Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings