Vaibhav Narkhede

Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection

Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users

WC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order Refund

JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure

Animation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG Upload

Header Footer Builder for Elementor < 1.2.1 - Contributor+ Stored XSS via Template Import

Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX

Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure