Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion
Muslim Prayer Time-Salah/Iqamah <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure
GS Insever Portfolio <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection
Linear <= 2.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion
SKT Page Builder <= 4.6 - Authenticated (Subscriber+) Arbitrary File Upload
Deliver via Shipos for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via dvsfw_bulk_label_url Parameter