Dmitrii Ignatyev

WP-Optimize <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update and Image Manipulation

Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update

Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection

Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause

Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation

System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)

Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes

Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection

System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)