Karthik Ramakrishnan

WPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site Path

WPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory Setting

Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting

Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields

Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute

PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note Fields

Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF

Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF

Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block

LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form Step Settings