The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Variation Swatches for WooCommerce 1.0.8 – 1.3.2 – Cross-Site Request Forgery to Plugin Settings Reset
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cliptakes <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting