Tonn

BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion

BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read

Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover

School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload

Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset

Animation Addons for Elementor Pro <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

WP RealEstate <= 1.6.26 - Unauthenticated Privilege Escalation via 'process_register'

AdForest <= 5.1.6 - Authentication Bypass

Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read

WooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File Deletion