dc11

Bold Page Builder < 3.1.6 - PHP Object Injection

Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion

Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting

Contact Form 7 Captcha < 0.0.9 - CSRF to Stored XSS

Qyrr < 0.7 - Authenticated (contributor+) Stored XSS

Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS

Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

WP Hardening < 1.2.2 - Reflected XSS via historyvalue

WP Hardening < 1.2.2 - Reflected XSS via URI

DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)