Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.39 - Authentication Bypass to Account Takeover

pickplugins User Verification by PickPlugins

Live CSS Preview <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update

dojodigital Live CSS Preview

Torod – The smart shipping and delivery portal for e-shops and retailers <= 1.9 - Cross-Site Request Forgery To Plugin's Settings Modification

torod Torod – The smart shipping and delivery portal for e-shops and retailers

Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

michael_j_reid Weekly Planner

Feedback Modal for Website <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Feedback Data Exfiltration via 'export_data' Parameter

nedwp Feedback Modal for Website

Easy Jump Links Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

webradykal Easy Jump Links Menus

Auto Thumbnailer <= 1.0 - Authenticated (Contributor+) Arbitrary File Upload

moderntribe Auto Thumbnailer

Image Optimizer by wps.sk <= 1.2.0 - Cross-Site Request Forgery to Bulk Image Optimization

duddi Image Optimizer by wps.sk

PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting

ovologics PDF Catalog for WooCommerce

Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents <= 7.10.1321 - Cross-Site Request Forgery to Arbitrary File Upload

breadbutter Bread & Butter: Gate content & Improve lead conversion in 60 seconds breadbutter bread_and_butter

Hide Categories Or Products On Shop Page <= 1.0.7 - Cross-Site Request Forgery to Settings Update

kaushikankrani Hide Categories Or Products On Shop Page

EPROLO Dropshipping <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Tracking Data Modification

paulepro2019 EPROLO Dropshipping

Takeads <= 1.0.13 - Missing Authorization to Plugin Settings Deletion

takeads Takeads

Featured Image via URL <= 0.1 - Authenticated (Contributor+) Arbitrary FIle Upload

tsaiid Featured Image via URL

Twitscription <= 0.1.1 - Reflected Cross-Site Scripting via admin.php PATH_INFO

natambu Twitscription

Jabbernotification <= 0.99-RC2 - Reflected Cross-Site Scripting via admin.php PATH_INFO

missi Jabbernotification

Time Sheets <= 2.1.3 - Cross-Site Request Forgery

mrdenny Time Sheets

ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload

contentstudio ContentStudio

WP-SOS-Donate Donation Sidebar Plugin <= 0.9.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

switch2mac WP-SOS-Donate Donation Sidebar Plugin

Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Update

monkeyboz Quantic Social Image Hover