Naoki Kawahigashi

EASY-JS-WPAPI <= 2.0 - Unauthenticated Administrator Password Disclosure and Authentication Bypass

Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For Header

Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option

Userplace <= 1.2.0 - Unauthenticated Privilege Escalation

Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header

Exsile SMS Gateway < 2.0.0 - Subscriber+ Privilege Escalation via Arbitrary Option Update

IVPAY payments <= 1.0.8 - Unauthenticated SQLi via 'payment_id' Parameter

GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi

All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write

Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter