Metaphor Widgets <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Chatter <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Blogger Image Import 2.1 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Post-to-Post Links <= 4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com <= 3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Kapost <= 2.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Call me Now <= 1.0.5 - Cross-Site Request Forgery
wp_amaps <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting