Moose Love

Trinity Audio <= 5.20.2 - Cross-Site Request Forgery

Web Accessibility By accessiBe <= 2.10 - Cross-Site Request Forgery

PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection

WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting

SNORDIAN's H5PxAPIkatchu <= 0.4.17 - Unauthenticated Stored Cross-Site Scripting via insert_data

Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification

Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure