Karthik Ramakrishnan

LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter

LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax

Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass

Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF

WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs

Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key

User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase

User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page

Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover

Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection