Tonn

Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read

WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation

SoundRise Music <= 1.7 - Authenticated (Subscriber+) Arbitrary Options Update

DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation

InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current

Industrial <= 1.7.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion

Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options