Theme Options Z <= 1.4 - Cross-Site Request Forgery
aThemes Addons for Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Blocks for WooCommerce <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution
Zarinpal Paid Downloads <= 2.3 - Authenticated (Admin+) Arbitrary File Upload
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting