Michael Mazzolini

Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection

Sparkling <= 2.4.9 - Missing Authorization to Unauthenticated Arbitrary Plugin Activation/Deactivation

Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution

Supreme Modules Lite <= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import

ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'

Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion

AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution