Kuba

MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)

CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field

PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter

Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter

ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name

Forminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter

Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting

WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

HUSKY <= 1.4.3 - Reflected Cross-Site Scripting