WP2APP <= 2.6.2 - Reflected Cross-Site Scripting
WP IMAP Auth <= 4.0.1 - Reflected Cross-Site Scripting
CAMOO SMS <= 3.0.1 - Reflected Cross-Site Scripting
Rezdy Reloaded <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
History timeline <= 0.7.2 - Reflected Cross-Site Scripting
Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function