AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery
MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler <= 1.7.0 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
WP jQuery DataTable <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
ViewMedica Embed <= 1.4.15 - Cross-Site Request Forgery to SQL Injection
Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page