Scan External Links <= 1.0 - Reflected Cross-Site Scripting
Shipping via Planzer for WooCommerce <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids
Google Maps Travel Route <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
StorePress <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Responsive Flickr Slideshow <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
FAT Event Lite <= 1.1 - Unauthenticated Local File Inclusion
SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
wp custom countdown <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting