Muhammad Zeeshan

Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing

Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting

WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal

Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action

Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor

Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification

Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting

WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef