Pablo González Pérez

FraudLabs Pro SMS Verification 1.11.2 - 1.12.1 - Unauthenticated SMS Verification Bypass via wc_sms_action_verified

vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter

Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook

Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook

CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference

Forms < 3.0.2 - Unauthenticated Stored XSS via Form Submission

Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Order Payment Metadata Modification and Forced Order Failure

Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE

HootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint

Web Vitals Tracking <= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon Metric Name