Enrico Marcolini

Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDOR

UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII Disclosure

Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force

Fiber Admin < 4.0.1 - Unauthenticated Arbitrary Post and Term Order Modification via fiad_cpo_update and fiad_cpo_tax_update

Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF

WP PageNavi Style <= 1.4 - Stored XSS via CSRF

Real Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Update

Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter

Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload