Karthik Ramakrishnan

WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF

Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler

Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF

GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute

GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute

Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding

Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup

Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block

GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import