Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
A5 Custom Login Page <= 2.8.1 - Reflected Cross-Site Scripting
CanvasFlow <= 1.5.5 - Reflected Cross-Site Scripting
ECT Home Page Products <= 1.9 - Reflected Cross-Site Scripting
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
Push Notification for Post and BuddyPress <= 2.06 - Reflected Cross-Site Scripting
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Dominion – Domain Checker for WPBakery <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting