Naoki Kawahigashi

FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation

Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update

Livees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note Injection & Order Key Disclosure

SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation Deletion

Super Payments < 1.43.1 - Unauthenticated Payment Confirmation Forgery via Webhook Signature

Geliver Akıllı Kargo Pazaryeri 3.0.0 - 3.1.0 - Unauthenticated API Key Disclosure via Public Log File

Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosure

CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass

SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update