Nguyen Tan Phat

Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion

Taxi Booking Manager for Woocommerce | E-cab <= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover

Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion

ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection

WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move

Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization

Bravis User <= 1.0.1 - Authentication Bypass to Account Takeover

Videospirecore Theme Plugin <= 1.0.6 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function