Ramuel Gall

Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation

Cyr to Lat <= 3.5 - Authenticated SQL Injection

Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass

OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update

Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting

VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification

Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode