Tonn

Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user'

Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update

Spirit Framework <= 1.2.14 - Authentication Bypass to Account Takeover and Privilege Escalation

WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation

WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

Vikinger <= 1.9.30 - Authenticated (Subscriber+) Privilege Escalation via 'vikinger_user_meta_update_ajax'

WP JobHunt <= 7.1 - Authentication Bypass

Academist Membership <= 1.1.6 - Authentication Bypass via Account Takeover

Templines Elementor Helper Core <= 2.7 - Authenticated (Subscriber+) Privilege Escalation

WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover