Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
CubeWP Forms – All-in-One Form Builder <= 1.1.5 - Missing Authorization
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Missing Authorization to Unauthenticated DB Table Truncation
WPBITS Addons For Elementor Page Builder <= 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
Export Import Menus <= 1.9.1 - Missing Authorization to Unauthenticated Menu Export
Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode