István Márton

Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check

VK Blocks <= 1.63.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block

Envolve Plugin <= 1.0 - Unauthenticated Language File Deletion

Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover

Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload

Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass

E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposure