Team Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'
MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.5.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update
ECPay Ecommerce for WooCommerce <= 1.1.2411060 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress <= 1.7.5 - Authenticated (Contributor+) SQL Injection
WP Dispensary <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
System Dashboard <= 2.8.15 - Reflected Cross-Site Scripting via Filename Parameter
StageShow <= 9.8.6 - Reflected Cross-Site Scripting
Safe Ai Malware Protection for WP <= 1.0.17 - Missing Authorization to Unauthenticated Database Export