ZAST.AI

WP Enable WebP <= 1.0 - Authenticated (Author+) Arbitrary File Upload

Splide Carousel Block <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url' Block Attribute

Content Visibility for Divi Builder <= 4.02 - Authenticated (Contributor+) Remote Code Execution

StatCounter <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Author Nickname

Print, PDF, Email by PrintFriendly <= 5.5.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'content_position_css' Parameter

Sympl Repeater for ACF and Elementor <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting via ACF Repeater Field Values

Easy PHP Settings <= 1.0.4 - Authenticated (Administrator+) PHP Code Injection via 'wp_memory_limit' Setting

Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

Allow HTML in Category Descriptions <= 1.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Category Descriptions

Kunze Law <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting