vuxvinh

Advanced Custom Fields < 6.8.11 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields

Advanced Custom Fields 6.2.0 - 6.8.10 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR

Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path

Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure

CookieYes < 3.5.8 - Contributor+ Stored XSS via Cookie Category Scripts

All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure

MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure

GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route

GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal

Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code