ryan fabella

FraudLabs Pro SMS Verification <= 1.12.1 - Unauthenticated Unrestricted SMS Sending via wp_sms_action_send

WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege Escalation

YITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race Condition

MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation

Premium Packages < 7.3.1 - Unauthenticated Guest Order Status Disclosure

Premium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDOR

Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation

BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure

Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure

Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass