Veshraj Ghimire

Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting

Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR

Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR

Superio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site Scripting

Booknetic < 4.1.5 - Staff Creation via CSRF

WP Private Message < 1.0.6 - Private Message Disclosure via IDOR

Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting

WP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site Scripting

Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR

Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API