Vulnerability archive: section 16, page 26

Open a report to review affected versions, available fixes and original sources. Each report covers a specific issue; its presence does not establish whether your website is affected.

• Magical Addons For Elementor <= 1.1.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
• Event Tickets <= 5.28.3 - Authenticated (Editor+) Stored Cross-Site Scripting
• WooCommerce Extra Cost <= 2.6 - Cross-Site Request Forgery
• Paytm Payment Gateway <= 2.8.8 - Unauthenticated Stored Cross-Site Scripting
• MPL-Publisher <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
• Radius Blocks – WordPress Gutenberg Blocks <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
• Event Espresso 4 Decaf <= 4.10.44.decaf - Feature Bypass
• Pet-Manager – Petfinder <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via kwm-petfinder Shortcode
• Dolcino - Pastry and Cake Shop WordPress Theme <= 1.6 - Unauthenticated Local File Inclusion
• Plugin for Google Reviews <= 2.2.2 - Cross-Site Request Forgery
• WP Related Posts <= 1.0 - Cross-Site Request Forgery