The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.

The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

The moreads-se plugin before 1.4.7 for WordPress has XSS.

The megamenu plugin before 2.4 for WordPress has XSS.

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.

The twitter-plugin plugin before 2.55 for WordPress has XSS.

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.

The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.

The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.