WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
XML for Google Merchant Center <= 3.0.11 - Reflected Cross-Site Scripting
AdForest <= 5.1.8 - Authentication Bypass
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting