Dmitrii Ignatyev

WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'

Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering

Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import

WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery

Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading

Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute

Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting

GDPR Cookie Compliance <= 4.15.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode