Chloe Chamberland

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export

External Media < 1.0.34 - Authenticated Arbitrary File Upload

Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object Injection

Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)

Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce Generation

Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation

Redirection for Contact Form 7 < 2.3.4 - Unprotected AJAX Actions

Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Post Deletion

Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin Installation

Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation