WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
WP Find Your Nearest <= 0.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
User Role <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Total Contest Lite <= 2.8.1 - Reflected Cross-Site Scripting
Woocommerce osCommerce Sync <= 2.0.20 - Unauthenticated Stored Cross-Site Scripting
WP Frontend Submit <= 1.1.0 - Reflected Cross-Site Scripting
Breaking News Ticker <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection