Mike Gozdiskowski

Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal

Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload

Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution

EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor

LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration

Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server

ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure

Multiple Plugins from itayamar - Supply Chain Compromise

Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update