Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
Js O3 Lite <= 1.5.8.2 - Reflected Cross-Site Scripting
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Homey <= 2.4.1 - Authenticated (Subscriber+) Privilege Escalation
Neon Product Designer <= 2.1.1 - Authenticated (Contributor+) SQL Injection
Smart Agenda – Prise de rendez-vous en ligne <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export