Tonn

Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

AdForest <= 6.0.9 - Authentication Bypass to Admin

WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload

Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload

School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

BeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion

Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read