Krzysztof Zając

IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF

IP2Location Country Blocker < 2.26.5 - Ban Bypass

Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

Link Library < 7.2.8 - Library Settings Reset via CSRF

GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting

Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection

Dropdown Menu Widget <= 1.9.7 - Subscriber+ Arbitrary Settings Update to Stored XSS

Futurio Extra < 1.6.3 - Subscriber+ User Email Address Disclosure

WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)

English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect