Trương Hữu Phúc (truonghuuphuc)

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update

Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter

MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection

Login Lockdown & Protection <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting

Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data

Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection

WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution

Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution

WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection