Sir Gnucommerce vulnerabilities

• sir gnucommerce The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. CVE-2016-10920 6.1 MediumAugust 22, 2019
• sir gnucommerce The gnucommerce plugin before 1.4.2 for WordPress has XSS. CVE-2017-18572 6.1 MediumAugust 22, 2019