Sai Praneeth Koti

RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field

KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure

MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path

Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR

Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint