vgo0

Advanced Sermons <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Christmasify! <= 1.5.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update

Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update

Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion

Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter

Stock Ticker <= 3.24.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock_ticker Shortcode

WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter

WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting