Chokri Hammedi

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion

Carbon Forum 5.9.0 Persistent XSS via Forum Name Field

Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

weDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post Update

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter

WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter

XMB Forum 1.9.12.06 Persistent Cross-Site Scripting via Admin Templates

WorkOrder CMS 0.1.0 - SQL Injection