Matthew Rollings

Flamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure

WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Virtue <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author

Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution

WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure

Duplicator <= 1.5.9 - Full Path Disclosure

Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter

Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read