István Márton

WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode

ACF Photo Gallery Field <= 1.9 - Authenticated (Subscriber+) Arbitrary Usermeta Update

Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Puzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

s2Member Pro <= 241216 - Unauthenticated PHP Object Injection

Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider

Tiger <= 101.2.1 - Authenticated (Subscriber+) Privilege Escalation

WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing