App Embed <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export
SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Food Store – Online Food Delivery & Pickup <= 1.5.1 - Reflected Cross-Site Scripting
WP Triggers Lite <= 2.5.3 - Reflected Cross-Site Scripting
Binary MLM Woocommerce <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting