Jonas Benjamin Friedli

ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update

Binary MLM Plan <= 3.0 - Unauthenticated Limited Privilege Escalation

Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution

WP-OAuth <= 0.4.1 - Reflected Cross-Site Scripting

Smart Docs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Specific Content For Mobile – Customize the mobile version without redirections <= 0.5.5 - Authenticated (Contributor+) SQL Injection

EchBay Admin Security <= 1.3.0 - Reflected Cross-Site Scripting

FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Missing Authorization to Authenticated (Subscriber+) Sync Rule Creation