Artus KG

JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override

HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings

YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax

Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field

User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers

Limit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email

Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header

Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch