There's another vulnerability that I haven't seen reported, and that is the W3 Total Cache credit card vulnerability.

I purchased W3 2 years ago. Before it was set to renew, I tried to cancel the subscription. Email, support requests, phone calls... crickets.

My credit card was charged and I successfully disputed the charge. Fast forward to this past Monday. A year later, and they charged my card again!!

I am mystified as to how this company can even claim to be operational. They do not respond to any contact, and the last post on their blog is from 2014.