The Ultimate WordPress Toolkit – WP Extended

Reflected CrossSite Scripting vulnerability <= 3.0.9

Reflected Cross Site Scripting (XSS) vulnerability <= 3.0.8

Reflected CrossSite Scripting via page vulnerability <= 3.0.8

Authenticated (Subscriber+) Sensitive Information Exposure vulnerability <= 3.0.8

Authenticated (Subscriber+) Arbitrary Options Update vulnerability <= 3.0.8