Universal Analytics Injector <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mark Posts <= 2.2.3 - Missing Authorization
Shockingly Big IE6 Warning <= 1.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Cookies Alert <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Web Testimonials <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Better Protected Pages <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Charity-thermometer <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
imaGenius <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting