Tonn

WooCommerce Point of Sale <= 6.1.0 - Insecure Direct Object Reference to Privilege Escalation via Arbitrary User Email Change

BeeTeam368 Extensions Pro <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion

School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload

WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload

DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file

Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user

WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover

Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation