Tonn

WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request

WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation

WP JobHunt <= 7.1 - Authentication Bypass to Candidate

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update

WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function

BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password

SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover