GS Insever Portfolio <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection
Linear <= 2.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion
SKT Page Builder <= 4.6 - Authenticated (Subscriber+) Arbitrary File Upload
Deliver via Shipos for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via dvsfw_bulk_label_url Parameter
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
Responsive FlipBook Plugin WordPress <= 2.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
3DVieweronline <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting