dayea song

Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection

qnotsquiz <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting

USB Qr Code Scanner For Woocommerce <= 1.0.0 - Cross-Site Request Forgery to Settings Update

Popover Windows <= 1.2 - Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX Actions

Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration Update

Wpik WordPress Basic Ajax Form <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Simple Theme Changer <= 1.0. - Missing Authorization to Plugin Settings Update via AJAX Actions

Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update

Truefy Embed <= 1.1.0 - Cross-Site Request Forgery to 'truefy_embed_options_update' Settings Update

Purchase and Expense Manager <= 1.1.2 - Cross-Site Request Forgery to Arbitrary Purchase Record Deletion