0xBassia

Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions

Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Order Data Disclosure

Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account Takeover

Advanced Customized Prompts <= 1.0.1 - Subscriber+ Stored XSS via Product Popup Configuration

Advanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata Tampering

Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure

Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Media Proxy