Ramuel Gall, Wordfence

Header Footer Code Manager <= 1.1.16 Reflected XSS

Jupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion

Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation

JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service

CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation

Nested Pages <= 3.1.15 Open Redirect

Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification

WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal

WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload