The Ultimate WordPress Toolkit – WP Extended

Missing Authorization to Authenticated (Subscriber+) Remote Code Execution vulnerability <= 3.0.11

Missing Authorization to Authenticated (Subscriber+) Stored CrossSite Scripting vulnerability <= 3.0.11

Reflected CrossSite Scripting vulnerability <= 3.0.9

Reflected Cross Site Scripting (XSS) vulnerability <= 3.0.8

Reflected CrossSite Scripting via page vulnerability <= 3.0.8