Woocommerce osCommerce Sync <= 2.0.20 - Unauthenticated Stored Cross-Site Scripting
Total Contest Lite <= 2.8.1 - Reflected Cross-Site Scripting
Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection
Breaking News Ticker <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation
CWD – Stealth Links <= 1.3 - Unauthenticated SQL Injection
uListing <= 2.1.6 - Authenticated (Contributor+) SQL Injection
Video & Photo Gallery for Ultimate Member <= 1.1.2 - Authenticated (Subscriber+) Server-Side Request Forgery