Naoki Kawahigashi

OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read

WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion

Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter

Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter

Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update

Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup

Disable Users <= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC and Application Passwords

Topcontent <= 1.2.1 - Unauthenticated Stored XSS via Content Webhook

Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret

WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password Rewrite