Usama Arshad

Antom Payments <= 2.0.11 - Unauthenticated WooCommerce Order Data Disclosure

Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction

Car Dealer <= 4.73 - Unauthenticated Private/Draft/Pending Post Content Disclosure via cardealer_single_car_ajax

Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR

Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure

DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update

Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route

Kali Forms < 2.4.30 - Subscriber+ User Email Address Disclosure

Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting

Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax