Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.
Subscriber Broken Access Control in uListing <= 2.2.0 versions.
Contributor Broken Access Control in uListing <= 2.2.0 versions.
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.
Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0.
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.
Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions.
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.
Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.