Jonas Benjamin Friedli

User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation

NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion

WP Discourse <= 2.5.9 - Authenticated (Author+) Information Exposure

LLM Hubspot Blog Import <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Hubspot Import

简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read

Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out

Simple Page Access Restriction <= 1.0.31 - Cross-Site Request Forgery via Multiple Parameters

Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download

WP Custom Admin Login Page Logo <= 1.4.8.4 - Cross-Site Request Forgery to Settings Update

Customer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site Scripting