WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross-Site Scripting via 'page' vulnerability

Reflected Cross-Site Scripting via 'page' vulnerability discovered by Colin Xu in WordPress Plugin Shortcodes Blocks Creator Ultimate versions = 2.2.0...

WordPress SEO Help plugin <= 6.1.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin SEO Help versions = 6.1.3...

WordPress WP - Bulk SMS - by SMS.to plugin <= 1.0.12 - Reflected Cross-Site Scripting vulnerability

WordPress WP - Bulk SMS - by SMS.to plugin = 1.0.12 - Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin WP – Bulk SMS versions = 1.0.12...

WordPress Front End Users plugin <= 3.2.32 - Authenticated (Admin+) SQL injection vulnerability

Authenticated Admin+ SQL injection vulnerability discovered by Colin Xu in WordPress Plugin Front End Users versions = 3.2.32...

WordPress Currency Switcher for WooCommerce plugin <= 2.16.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Currency Switcher for WooCommerce versions = 2.16.2...

WordPress LTL Freight Quotes – Purolator Edition plugin <= 2.2.3 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Purolator Edition versions = 2.2.3...

WordPress LTL Freight Quotes – SEFL Edition plugin <= 3.2.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – SEFL Edition versions = 3.2.4...

WordPress Small Package Quotes – USPS Edition plugin <= 1.3.5 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – USPS Edition versions = 1.3.5...

WordPress Pollin plugin <= 1.01.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Pollin versions = 1.01.1...

WordPress LTL Freight Quotes – Estes Edition plugin <= 3.3.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Estes Edition versions = 3.3.7...

WordPress Small Package Quotes – Purolator Edition plugin <= 3.6.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – Purolator Edition versions = 3.6.4...

WordPress ShipEngine Shipping Quotes plugin <= 1.0.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin ShipEngine Shipping Quotes versions = 1.0.7...

WordPress StaffList plugin <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin StaffList versions = 3.2.3...

WordPress VR-Frases plugin <= 4.0.1 - Reflected XSS to SQL Injection vulnerability

Reflected XSS to SQL Injection vulnerability discovered by Colin Xu Patchstack Alliance in WordPress Plugin VR-Frases versions = 4.0.1...

WordPress Single-user-chat plugin <= 0.5 - Authenticated (Subscriber+) Limited Options Update vulnerability

Authenticated Subscriber+ Limited Options Update vulnerability discovered by Colin Xu in WordPress Plugin Single-user-chat versions = 0.5...

WordPress WP Image Uploader plugin <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery to Arbitrary File Deletion vulnerability discovered by Colin Xu in WordPress Plugin WP Image Uploader versions = 1.0.1...

WordPress SEO Blogger to WordPress Migration using 301 Redirection plugin <= 0.4.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin SEO Blogger to WordPress Migration using 301 Redirection versions = 0.4.8...

WordPress Themify Builder plugin <= 7.6.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Themify Builder versions = 7.6.6...

WordPress Link Library plugin <= 7.7.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Link Library versions = 7.7.2...

WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – Unishippers Edition versions = 2.4.8...