HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload
WP Foodbakery <= 4.7 - Reflected Cross-Site Scripting
Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
DWT – Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Directorybox Manager <= 2.5 - Authentication Bypass
Simple add pages or posts <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update