Raphael P. Cigana

AppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version Disclosure

Schema & Structured Data for WP & AMP < 1.70 - Authenticated Arbitrary Post Modification via Backup Import

Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific_template Shortcode

Dynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX Action

Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget

Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget

SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter

Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token

WP Data Access < 5.5.88 - Subscriber+ SSRF