Naoki Kawahigashi

CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass

SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update

Payments for Hubtel < 1.0.2 - Unauthenticated Order Key Disclosure via IDOR

Blacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords

Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form

Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header

Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter

The Pressengine <= 1.0 - Unauthenticated Authentication Bypass

Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter