Advanced Options Editor <= 1.0 - Reflected Cross-Site Scripting
Course Migration for LearnDash <= 1.0.2 - Authenticated (Subscriber+) Server-Side Request Forgery
BSK Forms Blacklist <= 3.9 - Cross-Site Request Forgery
Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
CubeWP Forms – All-in-One Form Builder <= 1.1.5 - Missing Authorization
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection