Nir Yehoshua

ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls

ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate

ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie

ProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override

Uncontrolled Search Path Element in Bosch IP Helper