Bob Matyas

LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode

Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload

Conditional CAPTCHA <= 4.0.0 - Open Redirect

WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF

WPS Visitor Counter Plugin <= 1.4.8 - Reflected XSS via $_SERVER['REQUEST_URI']

NS Maintenance Mode for WP <= 1.3.1 - Admin+ Stored XSS

Court Reservation < 1.10.9 - Event Deletion via CSRF

Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF

YaDisk Files <= 1.2.5 - Contributor+ Stored XSS via Shortcode

Newsletter Popup <= 1.2 - List Deletion via CSRF