Colin Xu

Hide My Site <= 2.2 - Unauthenticated Information Exposure

LTL Freight Quotes – Purolator Edition <= 2.2.3 - Unauthenticated SQL Injection

Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection

WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting

Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload

LTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection

Run Contests, Raffles, and Giveaways with ContestsWP <= 2.0.3 - Reflected Cross-Site Scripting

WP – Bulk SMS – by SMS.to <= 1.0.12 - Reflected Cross-Site Scripting

Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting

Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection