Karthik Ramakrishnan

All-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via Player Page and Download Handler

Post Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option Name

Post Duplicator < 3.0.18 - Admin+ Privilege Escalation via Unvalidated Capability Assignment

FV Player < 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing Authorization

FV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers

FV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption

Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass

MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override

All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post Meta

WPvivid Backup & Migration < 0.9.137 - Admin+ Arbitrary Database Table Deletion via Snapshot ID