WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update
WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields
Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time <= 1.0.0 - Authenticated (Contributor+) Post Disclosure