Tonn

Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover

Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup

Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data

Edumall <= 4.2.4 - Unauthenticated Local File Inclusion

Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover

WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload

WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload

Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register