Francesco Carlucci

linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure

Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme <= 3.1.4 - Authenticated (Contributor+) Blind Server-Side Request Forgery via remote_request

Steel <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn Shortcode

Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare

GamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Squelch Tabs and Accordions Shortcodes <= 0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via accordions Shortcode

Gum Elementor Addon <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Widget

Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxClearCategory

WP AdCenter – Ad Manager & Adsense Ads <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute