Michael Mazzolini

Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation

Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'

Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia

Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting

The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution

UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read

Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains

Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View

Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations

WordPress Popular Posts <= 7.1.0 - Unauthenticated Arbitrary Shortcode Execution