Smart Custom Fields <= 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Geo Content <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Visitor Statistics (Real Time Traffic) <= 7.3 - Missing Authorization
WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure
Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax
Social Share Buttons for WordPress <= 2.7 - Missing Authorization to Unauthenticated Image Upload & Path Traversal
PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Sellsy <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting