Ramuel Gall

Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode

Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode

Jeg Elementor Kit <= 2.5.6 - Authorization Bypass

Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode

miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change

WP Cerber Security <= 9.1 - Unauthenticated Stored Cross-Site Scripting

Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint

Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload

Shield Security <= 17.0.17 - Missing Authorization

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import