Shikhali Jamalzade

Cancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions

Simple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST API

MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item

Wired Impact Volunteer Management < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp

REST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download Endpoint

Sync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification