István Márton

SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

ProfileGrid <= 5.5.0 - Hardcoded Encryption Key

Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload

UserPro <= 5.1.1 - Missing Authorization via multiple functions

Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator

WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

Interact: Embed A Quiz On Your Site <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

Edwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check

WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode