Flickr Show <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

nuvuscripts Flickr Show

Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure

ngothoai Document Pro Elementor – Documentation & Knowledge Base

Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read

miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin

Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode

wpkube Authors List

Geopost <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

rampantlogic Geopost

Skip to Timestamp <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

doytch Skip to Timestamp

Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields

wpcox Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress

CTL Arcade Lite <= 1.0 - Cross-Site Request Forgery to Plugin Activation and Deactivation

codethislab CTL Arcade Lite

RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting

loveless RandomQuotr

Fleet Manager <= 2.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting

iworks Fleet Manager

Progress Bar Blocks for Gutenberg <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

jobayer534 Progress Bar Blocks for Gutenberg

Find Unused Images <= 1.0.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

toastwebsites Find Unused Images

My Geo Posts Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

mindstien My Geo Posts Free

Crypto Tool <= 2.22 - Missing Authentication to Unauthenticated Limited File Deletion

odude Crypto Tool

Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

five9 Five9 Live Chat

Ungapped Widgets <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

oscaruribe Ungapped Widgets

Mementor Core <= 2.2.5 - Authenticated (Subscriber+) Privilege Escalation

mvirik Mementor Core

WP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

eflyjason WP BBCode

Slippy Slider – Responsive Touch Navigation Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

mitegvg Slippy Slider – Responsive Touch Navigation Slider

Shelf Planner <= 2.7.0 - Unauthenticated Information Exposure via Log Files

shelfplanner Shelf Planner