Chloe Chamberland, Wordfence

XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update

WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting

Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion

ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation

ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component

ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component

Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin