Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter
Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Return Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
Listivo – Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting
WP Extra Fields <= 1.0.1 - Reflected Cross-Site Scripting
CalendApp <= 1.1 - Reflected Cross-Site Scripting
WP Pricing Table <= 1.1 - Reflected Cross-Site Scripting
Custom Block Builder – Lazy Blocks <= 3.8.2 - Reflected Cross-Site Scripting