Jonas Benjamin Friedli

Binary MLM Plan <= 5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference

Zip Attachments <= 1.6 - Missing Authorization to Limited File Deletion

Mavix Education <= 1.0 - Missing Authorization to Authenticated (Subscriber+) 'Creativ Demo Importer' Plugin Activation

Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

Easy restaurant menu manager <= 2.0.2 - Cross-Site Request Forgery to Menu Upload

Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode

Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings

Library Management System <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation

Simple Registration for WooCommerce <= 1.5.8 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval