WordPress Uncode Core plugin <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution in uncodegetmedias vulnerability discovered by mikemyers in WordPress Plugin Uncode Core versions = 2.9.1.6...

WordPress Social Sharing Plugin – Sassy Social Share plugin <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter vulnerability

Reflected Cross-Site Scripting via heateormastodonshare Parameter vulnerability discovered by mikemyers in WordPress Plugin Sassy Social Share versions = 3.3.69...