ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.3 - Cross-Site Request Forgery to Settings Update
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting
Bitly’s WordPress Plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion
Muslim Prayer Time-Salah/Iqamah <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure