Premium Packages <= 5.9.6 - Authenticated (Administrator+) SQL Injection
FAQ Builder AYS <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Paytium <= 4.4.11 - Unauthenticated Full Path Disclosure
HT Conctact Form 7 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Visitor Statistics (Real Time Traffic) <= 7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
12 Step Meeting List <= 3.16.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
Extensions For CF7 <= 3.2.0 - Authenticated (Admin+) Sever-Side Request Forgery
Button Generator – easily Button Builder <= 3.1.1 - Cross-Site Request Forgery