Mutantgun

WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure

WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields

FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR

Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion

Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypass

FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email

Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass

CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handler

Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting

HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator