Yaswanth Reddy Sunkara

Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery

GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload

Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints

LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product Name

WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter

WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

Estatik < 4.3.3 - Login CSRF