← All credits
Villu Orav
19 vulnerability records and advisories credit this contributor.
CVE-2024-12008
W3 Total Cache <= 2.8.1 Information Exposure via Log Files
CVE-2024-5941
GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion
CVE-2024-4351
Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation
CVE-2024-10585
InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading
CVE-2024-12006
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
CVE-2024-0842
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
CVE-2024-12365
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
CVE-2024-11205
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
CVE-2024-6828
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting