Vulnerability archive: section 8, page 27

Open a report to review affected versions, available fixes and original sources. Each report covers a specific issue; its presence does not establish whether your website is affected.

• CRM Perks Forms <= 1.1.4 - Authenticated (Contributor+) SQL Injection
• Cornerstone < 7.8.8 - Authenticated (Subscriber+) Arbitrary Code Execution
• CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion
• Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution
• PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion
• Increase upload file size & Maximum Execution Time limit <= 2.0 - Reflected Cross-Site Scripting
• Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Subscriber Deletion
• Categories Images <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
• Structured Content <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
• MapSVG <= 8.14.0 - Unauthenticated SQL Injection
• Payment Plugins Braintree For WooCommerce <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud
• TinyMCE Custom Styles <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
• WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion
• Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar <= 2.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
• In Stock Mailer for WooCommerce <= 2.1.1 - Reflected Cross-Site Scripting