Nguyen Anh Tien

Plugin

WPvivid Backup and Migration <= 0.9.90 Privilege Escalation on Staging Environment vulnerability

Plugin

Carousel Slider <= 2.2.2 Broken Access Control vulnerability

Plugin

Simple Giveaways <= 2.46.0 Broken Access Control vulnerability

Plugin

Download Monitor <= 4.8.3 Arbitrary File Upload vulnerability

Plugin

Leyka <= 3.30.2 Privilege Escalation vulnerability

Plugin

Link Whisper Free <= 0.6.3 Unauthenticated Broken Access Control vulnerability

Plugin

Easy Digital Downloads 3.1 - 3.1.1.4.1 3.1.1.4.1 Unauthenticated Privilege Escalation Vulnerability

Plugin

If Menu <= 0.16.3 Broken Access Control

Plugin

WordPress Email Marketing Plugin – WP Email Capture <= 3.10 Sensitive Data Exposure vulnerability

Plugin

WP-RecentComments <= 2.2.7 RecentComments plugin <= 2.2.7 Broken Access Control vulnerability

Plugin

Auto Affiliate Links <= 6.2.1.5 Unauth. Broken Access Control vulnerability

Plugin

WordPress Form Builder Plugin – Gutenberg Forms <= 2.2.8.3 Auth. Broken Access Control vulnerability

Plugin

Analytify <= 4.2.3 Google Analytics Dashboard plugin <= 4.2.3 Privilege Escalation vulnerability

Plugin

Robo Gallery <= 3.2.9 Auth. Broken Access Control vulnerability

Plugin

Post Teaser <= 4.1.5 Auth. Broken Access Control vulnerability

Plugin

Afterpay Gateway for WooCommerce <= 3.5.0 Unauth. Reflected CrossSite Scripting (XSS) vulnerability

Plugin

Better Click To Tweet <= 5.10.3 Unauth. Broken Access Control vulnerability

Plugin

WP-FormAssembly <= 2.0.5 FormAssembly plugin <= 2.0.5 Auth. Arbitrary File Read vulnerability

Plugin

Plugin for Google Reviews <= 2.2.2 Auth. Broken Access Control vulnerability

Plugin

WooSwipe WooCommerce Gallery <= 3.0.2 Auth. Broken Access Control vulnerability

Plugin

ULTIMATE TABLES <= 1.6.5 Unauth. Reflected CrossSite Scripting (XSS) vulnerability

Plugin

LoginPress <= 1.6.2 Broken Access Control vulnerability

Plugin

Permalink Manager Lite <= 2.2.20 Broken Access Control vulnerability

Plugin

Subscribe to Category <= 2.7.4 Auth. Broken Access Control vulnerability

Plugin

Modula Image Gallery <= 2.6.9 Unauth. Plugin Settings Change vulnerability

Plugin

Advanced Floating Content <= 1.2.1 Multiple Auth. CrossSite Scripting (XSS) vulnerabilities

Plugin

Welcart e-Commerce <= 2.7.7 Unauth. Directory Traversal vulnerability

Plugin

WordPress Importer <= 1.0.2 Reflected CrossSite Scripting (XSS) vulnerability

Plugin

CRM Perks Forms <= 1.1.0 Reflected CrossSite Scripting (XSS) vulnerability

Plugin

FontMeister <= 1.08 Reflected CrossSite Scripting (XSS) vulnerability

Plugin

Photospace Gallery <= 2.3.5 Broken Access Control vulnerability

Plugin

Pop-up <= 1.1.5 up plugin <= 1.1.5 Privilege Escalation vulnerability

Plugin

ActiveDEMAND <= 0.2.27 Broken Authentication vulnerability

Plugin

GS Testimonial Slider <= 1.9.5 Authenticated Stored CrossSite Scripting (XSS) vulnerability

Plugin

Custom Product Tabs for WooCommerce <= 1.7.7 Broken Access Control vulnerability leading to &yikesthecontenttoggle option update

Plugin

Images Slideshow by 2J <= 1.3.54 Reflected CrossSite Scripting (XSS) vulnerability

Plugin

Ravpage <= 2.27 Unauthenticated Reflected CrossSite Scripting (XSS) vulnerability

Plugin

ShortPixel Adaptive Images <= 3.3.1 Subscriber+ Plugin Settings Update vulnerability

Plugin

FV Flowplayer Video Player <= 7.5.15.727 SQL Injection (SQLi) vulnerability

Plugin

Accelerated Mobile Pages <= 1.0.77.31 Authenticated Stored CrossSite Scripting (XSS) vulnerability

Plugin

Ivory Search <= 4.6.6 Reflected CrossSite Scripting (XSS) vulnerability

Plugin

Testimonial Rotator <= 3.0.3 Authenticated Stored CrossSite Scripting (XSS) vulnerability

Plugin

Ivory Search <= 4.5.10 Reflected CrossSite Scripting (XSS) vulnerability

Plugin

Constant Contact Forms <= 1.8.7 Multiple Authenticated Stored CrossSite Scripting (XSS) vulnerabilities

Plugin

WP Customer Reviews <= 3.4.2 Multiple Unauthenticated and Low Privilege Authenticated Stored XSS vulnerabilities

Plugin

Blog2Social <= 6.3.0 Authenticated SQL Injection (SQLi) vulnerability

Plugin

AdRotate Banner Manager <= 5.8.3 Authenticated SQL Injection (SQLi) vulnerability