Enrico Marcolini

DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation

PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback

WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter

Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler

CM HIPAA Forms < 3.3.2 - hipaa_forms+ Privilege Escalation via cm_hipaa_update_user_role

Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update

SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback

BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery

TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter