WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability

Craig Hewitt Seriously Simple Podcasting castos seriously_simple_podcasting

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

Craig Hewitt Seriously Simple Podcasting castos seriously_simple_podcasting

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability

Craig Hewitt Seriously Simple Podcasting castos seriously_simple_podcasting

WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability

boldthemes Bold Page Builder

WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability

Uncanny Owl Uncanny Automator

WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability

Icegram Email Subscribers & Newsletters

WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability

Kriesi Enfold

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'

elextensions ELEX WordPress HelpDesk & Customer Ticketing System elula wsdesk

FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode

techjewel FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal

elextensions ELEX WordPress HelpDesk & Customer Ticketing System elula wsdesk

ACPI: video: Fix use-after-free in acpi_video_switch_brightness()

Linux Linux Linux Linux

Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"

Linux Linux Linux Linux

btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation

Linux Linux Linux Linux

Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection

trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation

Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting

nmedia Simple User Registration

WP Delete Post Copies <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting

etruel WP Delete Post Copies

Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget

nalam-1 Magical Products Display – Elementor WooCommerce Widgets | Product Sliders, Grids & AJAX Search

WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function

listingthemes WP Directory Kit

Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

appsbd Vitepos – Point of Sale (POS) for WooCommerce

Shortcode for Google Street View <= 0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

antiochinteractive Shortcode for Google Street View