Top Comments <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Goodlayers Core <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Groundhogg <= 3.7.3.3 - Reflected Cross-Site Scripting
Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Function
Wp advertising management <= 1.0.3 - Reflected Cross-Site Scripting
Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery