Hero Banner Ultimate <= 1.4.3 - Authenticated (Author+) Local File Inclusion
Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
CubeWP Forms – All-in-One Form Builder <= 1.1.5 - Missing Authorization
Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode