moonge

Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms

Chat On Desk < 1.0.9 - Unauthenticated Account Takeover via Password Reset OTP Bypass

Lenxel WP <= 1.0.31 - Unauthenticated Account Takeover via Arbitrary Password Reset

Chama < 1.0.13 - Unauthenticated Arbitrary User Password Reset

Pronamic Pay <= 10.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms 'Update user role' Field

MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator

CAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password Reset

MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers

Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user