Muhammad Zeeshan

Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

Responsive <= 5.0.2 - Missing Authorization to HTML Injection

Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn

Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion

Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload

Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries

Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry

Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf