Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
Push Notification for Post and BuddyPress <= 2.06 - Reflected Cross-Site Scripting
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP MediaTagger <= 4.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
moseter <= 1.3.1 - Reflected Cross-Site Scripting
Dominion – Domain Checker for WPBakery <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
GatorMail SmartForms <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Perfect Portal Widgets <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting