| Age Gate |
Unauthenticated Local PHP File Inclusion from 'lang' |
| AnalyticsWP |
Unauthenticated SQL Injection (SQLi) |
| Analytify |
Private Settings Change (BAC) |
| Clearout Email Validator |
Cross-Site Scripting (XSS) |
| CM Download Manager |
File Deletion (BAC) |
| Contact Form & SMTP Plugin |
Cross-Site Scripting (XSS) |
| DAP to Autoresponders Email Syncing |
Unauthenticated Information Exposure |
| EZ SQL Reports Shortcode Widget and DB Backup |
Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) |
| EZ SQL Reports Shortcode Widget and DB Backup |
Cross-Site Request Forgery (CSRF) to SQL Injection (SQLi) |
| EZ SQL Reports Shortcode Widget and DB Backup |
Cross-Site Request Forgery (CSRF) to Cross-Site Scripting (XSS) |
| Just Writing Statistics |
Broken Access Control (BAC) |
| Kento WordPress Stats |
Cross-Site Scripting (XSS) |
| Login Alert |
Cross-Site Request Forgery (CSRF) to Cross-Site Scripting (XSS) |
| Login Logger |
Cross-Site Request Forgery (CSRF) |
| LoginPress |
Cross-Site Request Forgery (CSRF) and Options Update (BAC) |
| Login Redirect |
Cross-Site Scripting (XSS) |
| Members page only for logged in users |
Cross-Site Request Forgery (CSRF) to Cross-Site Scripting (XSS) |
| No Disposable Email |
Cross-Site Request Forgery (CSRF) to Cross-Site Scripting (XSS) |
| PHP/MySQL CPU performance statistics |
PHP Object Injection (RCE) |
| pixelstats |
Cross-Site Scripting (XSS) |
| Post SMTP |
SQL Injection (SQLi) from columns Parameter |
| Pro Rank Tracker |
Cross-Site Request Forgery (CSRF) to Cross-Site Scripting (XSS) |
| ReportAttacks |
SQL Injection (SQLi) |
| Scheduled & Automatic Order Status Controller for WooCommerce |
Open Redirection |
| Secure Copy Content Protection and Content Locking |
Missing Authorization (BAC) to Unauthenticated User Email Retrieval from ays_sccp_reports_user_search Function |
| ShareThis Dashboard for Google Analytics |
Missing Authorization (BAC) to Unauthenticated Feature Deactivation |
| SH Email Alert |
Cross-Site Scripting (XSS) |
| SMTP by BestWebSoft |
File Upload (BAC) |
| Textmetrics |
Broken Access Control (BAC) |
| Upload Quota per User |
Cross-Site Scripting (XSS) |
| URL Shortener | Conversion Tracking | AB Testing | WooCommerce |
Cross-Site Scripting (XSS) |
| URL Shortener | Conversion Tracking | AB Testing | WooCommerce |
Cross-Site Request Forgery (CSRF) |
| W3Counter Free Real-Time Web Stats |
Cross-Site Request Forgery (CSRF) |
| W3Counter Free Real-Time Web Stats |
Cross-Site Request Forgery (CSRF) |
| WP Activity Log |
PHP Object Injection (RCE) |
| WP Click Info |
Cross-Site Scripting (XSS) |
| WP Email Delivery |
Cross-Site Scripting (XSS) |
| WP Login Control |
Cross-Site Scripting (XSS) |
| WP Login Control |
Cross-Site Scripting (XSS) |
