AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPBot Pro WordPress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload
GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting
aDirectory – WordPress Directory Listing Plugin <= 1.6.5 - Unauthenticated PHP Object Injection