GitHub Gist Shortcode Plugin <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

paul1999 GitHub Gist Shortcode Plugin

Live Photos on WordPress <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

eggemplo Live Photos on WordPress

Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

mervinpraison Featured Image mer.vin featured_image

Astra Security Suite – Firewall & Malware Scan <= 0.2 - Unauthenticated Arbitrary File Upload

astrasecuritysuite Astra Security Suite – Firewall & Malware Scan

Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update

krishaweb Add Multiple Marker

Coon Google Maps <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

andrico Coon Google Maps

Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type'

mheob Include Fussball.de Widgets

Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State

odude Crypto Tool

The Total Book Project <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation

ryanmoyer The Total Book Project

Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload

koopersmith Elastic Theme Editor

Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

ethoseo Simple Donate

Jeba Cute forkit <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

jahed Jeba Cute forkit

Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

caselock Twitter Feed

Woocommerce – Products By Custom Tax <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

elvismdev Woocommerce – Products By Custom Tax

WP Count Down Timer <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

sitedin WP Count Down Timer

Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

mmdeveloper Preload Current Images

Paypal Donation Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

coenjacobs Paypal Donation Shortcode

Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation

softivus Wisly

Squirrels Auto Inventory <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

spokanetony Squirrels Auto Inventory

Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion

lovelightplugins Ninja Countdown | Fastest Countdown Builder