Matthew Rollings

Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution

Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure

Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection

NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting

Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting

Mega Elements <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode

PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download

Reveal Template <= 3.7 - Unauthenticated Full Path Disclosure