WP2LEADS <= 3.4.2 - Reflected Cross-Site Scripting
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection
WPGuppy <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
JobBoard Job listing <= 1.2.6 - Unauthenticated Arbitrary File Upload
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection
Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters