moonge

Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field

Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse

Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Reset

Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback

6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter

User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters

AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron

Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset

FoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Reset