dc11

UsersWP < 1.2.67 - Two-Factor Authentication Bypass

Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS

Qyrr < 0.7 - Authenticated (contributor+) Stored XSS

GiveWP < 2.24.1 - Unauthenticated SQLi

Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download

Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS

Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access