Rezgo Online Booking <= 4.1.5 - Unauthenticated Local File Inclusion
Service Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
App Embed <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure
Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
RightMessage WP <= 0.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation