István Márton

Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass

Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor

WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution

Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Update

WP fade in text news <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

UserPro <= 5.1.1 - Authentication Bypass to Administrator

EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

ProfileGrid <= 5.5.1 - Missing Authorization to User Import

MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload