ifoundbug

Community Events <= 1.5.1 - Unauthenticated SQL Injection

Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection

Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure

Community Events <= 1.5.1 - Unauthenticated SQL Injection

Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure

Magic Login Mail or QR Code <= 2.05 - Unauthenticated Privilege Escalation via Insecure QR Code File Storage