Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Function
Wp advertising management <= 1.0.3 - Reflected Cross-Site Scripting
Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery
Contact Form 7 Database – CFDB7 <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Post/Page Copying Tool <= 2.0.0 - Unauthenticated Sensitive Information Exposure
WPAchievements Free <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection
5centsCDN <= 24.8.16 - Reflected Cross-Site Scripting