WordPress Startklar Elementor Addons plugin <= 1.7.13 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by István Márton in WordPress Plugin Startklar Elementor Addons versions = 1.7.13...

CVE-2023-44477

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Boxy Studio Cooked plugin = 1.7.13 versions...