Felipe Caon

WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration

The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure

Simple Photoswipe <= 0.1 - Subscriber+ Arbitrary Settings Update

CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS

If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS

CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF

CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF

Search Filter Pro < 2.5.18 - Admin+ Stored XSS

Simple Photoswipe <= 0.1 - Admin+ Stored XSS

Responsive video embed < 0.5.1 - Contributor+ Stored XSS