Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
Zarinpal Paid Downloads <= 2.3 - Authenticated (Admin+) Arbitrary File Upload
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
BookPress – For Book Authors <= 1.2.7 - Missing Authorization
Social Links <= 1.0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sports Rankings and Lists <= 1.0.2 - Unauthenticated Arbitrary File Download
OnePress <= 2.3.11 - Missing Authorization