Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.9 - Missing Authorization to Icon Font Deletion
iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection
Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update
Music Sheet Viewer <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update
Table Editor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting