Tonn

Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover

Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion

Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite

MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download

Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile

CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion

WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update