SocialV – Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download
SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter
DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion
Medical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css