Erik David Martin WordPress Plugin Welcart e-Commerce 2.0.0 - 'search[order_column][0]' SQL injection
webapps php

y0ung_dst Jenzabar 9.2.2 - 'query' Reflected XSS.
webapps multiple CVE-2021–26723

LiquidWorm SmartFoxServer 2X 2.17.0 - God Mode Console WebSocket XSS
webapps multiple

Kr0ff SEO Panel 4.6.0 - Remote Code Execution (2)
webapps php

Kr0ff PhreeBooks 5.2.3 ERP - Remote Code Execution (2)
webapps php

SunCSR LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated)
webapps php

Jannick Tiger Car Rental Project 2.0 - Arbitrary File Upload to Remote Code Execution
webapps php

Noth Pixelimity 1.0 - 'password' Cross-Site Request Forgery
webapps multiple CVE-2020-23522

Jannick Tiger Student Record System 4.0 - 'cid' SQL Injection
webapps php

OUSSAMA RAHALI WordPress 5.0.0 - Image Remote Code Execution
webapps php CVE-2019-89242

Metin Yunus Kandemir Klog Server 2.4.1 - Command Injection (Authenticated)
webapps php CVE-2021-3317

stonepresto Roundcube Webmail 1.2 - File Disclosure
webapps php

Anmol K Sachan Vehicle Parking Tracker System 1.0 - 'Owner Name' Stored Cross-Site Scripting
webapps php

Mohammed Farhan H8 SSRMS - 'id' IDOR
webapps aspx

LiPeiYi bloofoxCMS 0.5.2.1 - CSRF (Add user)
webapps php

0xB9 MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting
webapps php