Sai Praneeth Koti

Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization

WPFunnels < 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending via wpfnl_shortcode_optin_submission

RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field

KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure

MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path

Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration