Webcamconsult <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Ultimate Member <= 2.9.1 - Unauthenticated SQL Injection
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 1.9.80 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Update
Custom Post Type Lockdown <= 1.11 - Cross-Site Request Forgery to Privilege Escalation