Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget

bdthemes Element Pack Addons for Elementor

Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting

wpwham Checkout Files Upload for WooCommerce

Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links <= 1.2.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing

aioseo Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links

SolarWinds Observability Self-Hosted Open Redirection Vulnerability

SolarWinds SolarWinds Observability Self-Hosted solarwinds observability_self-hosted

SolarWinds Observability Self-Hosted XSS Vulnerability

SolarWinds SolarWinds Observability Self-Hosted solarwinds observability_self-hosted

SolarWinds Serv-U Path Restriction Bypass Vulnerability

SolarWinds Serv-U solarwinds serv-u

SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability

SolarWinds Serv-U solarwinds serv-u

SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability

SolarWinds Serv-U solarwinds serv-u

everviz <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

everviz everviz – Charts, Maps and Tables – Interactive and responsive

ArtiBot Free Chat Bot for WebSites <= 1.1.7 - Reflected Cross-Site Scripting via PostMessage

artibot ArtiBot Free Chat Bot for WebSites

Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

awensley Project Honey Pot Spam Trap

Download Panel <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification

arkadiykilesso Download Panel (Biggiko Team)

Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion

ikhodal Category and Product Woocommerce Tabs

The Permalinks Cascade <= 2.2 - Missing Authorization To Authenticated (Subscriber+) Plugin Settings Update

_luigi The Permalinks Cascade

WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload

nazsabuz WP Dropzone

RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute

rometheme RTMKit

WP Admin Microblog <= 3.1.1 - Cross-Site Request Forgery to Message Creation

winkm89 WP Admin Microblog

ACF Flexible Layouts Manager <= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update

valentinpellegrin ACF Flexible Layouts Manager

Gutenify - Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block

codeyatri Gutenify – Visual Site Builder Blocks & Site Templates.

Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Update

denishua Top Friends