Karthik Ramakrishnan

Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists

Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option

Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route

Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload

LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal

Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action

Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes

Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag

Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter

LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR