CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.

Source: CVE-2017-18557

CVE-2016-10909

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

Source: CVE-2016-10909

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.

Source: CVE-2017-18558

CVE-2016-10902

The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.

Source: CVE-2016-10902

CVE-2017-18553

The ad-buttons plugin before 2.3.2 for WordPress has XSS.

Source: CVE-2017-18553

CVE-2016-10908

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.

Source: CVE-2016-10908

CVE-2017-18556

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.

Source: CVE-2017-18556

CVE-2016-10903

The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.

Source: CVE-2016-10903

CVE-2019-15109

The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.

Source: CVE-2019-15109

CVE-2017-18538

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.

Source: CVE-2017-18538