István Márton

WP Users Masquerade <= 2.0.0 - Authenticated (Subscriber+) Authentication Bypass

ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator

Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver

Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload

Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export

ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update

Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change