Tonn

WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload

Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover

WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read

Opt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload

Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation

LUNA RADIO PLAYER <= 6.24.01.24 - Unauthenticated Arbitrary File Read

Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download

Configurator Theme Core <= 1.4.7 - Authenticated (Subscriber+) Privilege Escalation