István Márton

WP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass

Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload

UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation

FooEvents for WooCommerce <= 1.19.20 - Improper Authorization to (Contributor+) Arbitrary File Upload

Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload

WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload

WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection

JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation

Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode

Featured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode