Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Variation Swatches for WooCommerce 1.0.8 – 1.3.2 – Cross-Site Request Forgery to Plugin Settings Reset
The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection
WP-Polls <= 2.77.2 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
GamiPress <= 7.2.1 - Unauthenticated SQL Injection via orderby Parameter
WPBot Pro WordPress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation
Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting