Marco Wotschka

The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download

The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option

Essential Blocks <= 4.0.6 - Missing Authorization via get

Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object

WP JS <= 2.0.6 - Reflected Cross-Site Scripting

Corner Ad <= 1.0.56 - Cross-Site Request Forgery

WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder

IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization

WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'