CoDesigner WooCommerce Builder for Elementor <= 4.7.17.3 - Authenticated (Author+) Stored Cross-Site Scripting
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
Button Block <= 1.1.5 - Missing Authorization
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
Course Booking System <= 6.0.5 - Unauthenticated SQL Injection
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter