Tonn

WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update

BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password

SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover

Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

AdForest <= 6.0.9 - Authentication Bypass to Admin

WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload

Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload

School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation