Marco Wotschka

WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

VR Calendar <= 2.3.3 - Cross-Site Request Forgery

YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

WP Affiliate Platform <= 6.3.9 - Cross-Site Request Forgery

RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_uucss_logs'

Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting

Social Warfare <= 4.3.1 - Cross-Site Request Forgery

Mega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update

WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback'