Stored Cross-Site Scripting (XSS) vulnerability found by ThreatPress Research Team in WordPress WooCommerce Quick Reports plugin (versions <= 1.0.6).
3 June 2018 - plugin still closed by WordPress Security team, no patched version available.