Smart Agenda – Prise de rendez-vous en ligne <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
polka dots <= 1.2 - Reflected Cross-Site Scripting
Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function
Background Control <= 1.0.5 - Cross-Site Request Forgery to Arbitrary File Deletion
CoDesigner WooCommerce Builder for Elementor <= 4.7.17.3 - Authenticated (Author+) Stored Cross-Site Scripting
offset writing <= 1.2 - Reflected Cross-Site Scripting
Gallery and Lightbox <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting