Shortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

fastmover Shortcodes Bootstrap

UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages

Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.6 - Missing Authentication to Unauthenticated Presale Update

beycanpress Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO

UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages

Affiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

rustaurius Affiliate AI Lite

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

elextensions ELEX WordPress HelpDesk & Customer Ticketing System elula wsdesk

Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read

wpswings Return Refund and Exchange For WooCommerce

UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages

Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

flothemesplugins Flo Forms – Easy Drag & Drop Form Builder

AuthorSure <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

powerblogservice AuthorSure

WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting

iqonicdesign WPBookit

EchBay Admin Security <= 1.3.0 - Reflected Cross-Site Scripting

itvn9online EchBay Admin Security

Custom Post Type <= 1.0 - Cross-Site Request Forgery to Custom Post Type Deletion

farvehandleren Custom Post Type

Islamic Phrases <= 2.12.2015 - Authenticated (Contributor+) Stored Cross-Site Scripting

darto Islamic Phrases

BrightTALK WordPress Shortcode <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

billybigpotatoes BrightTALK WordPress Shortcode

Tips Shortcode <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

fpcorso Tips Shortcode

Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure

jcollings Import WP – Export and Import CSV and XML files to WordPress

AudioTube <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

davidangel AudioTube

URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload

bww URL Image Importer

Stock Tools <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

developdaly Stock Tools