Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin <= 1.6.9 versions.
WordPress plugin wp-cleanfix has Remote Code Execution
WordPress WP Cleanfix Plugin 2.4.4 has CSRF