Tonn

BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current

Industrial <= 1.7.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion

Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options

WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request

WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation

WP JobHunt <= 7.1 - Authentication Bypass to Candidate

WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation