Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting
Yumpu E-Paper publishing <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woocommerce check pincode/zipcode for shipping <= 2.0.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters
Responsive FlipBook Plugin WordPress <= 2.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update
WhatsApp click to chat <= 3.0.4 - Reflected Cross-Site Scripting
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection