btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation

Linux Linux Linux Linux

Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection

trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation

Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting

nmedia Simple User Registration

WP Delete Post Copies <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting

etruel WP Delete Post Copies

Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget

nalam-1 Magical Products Display – Elementor WooCommerce Widgets | Product Sliders, Grids & AJAX Search

WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function

listingthemes WP Directory Kit

Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

appsbd Vitepos – Point of Sale (POS) for WooCommerce

Shortcode for Google Street View <= 0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

antiochinteractive Shortcode for Google Street View

HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection

devitemsllc HT Mega – Absolute Addons For Elementor

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification

publishpress Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories

WP Company Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

bdeleasa WP Company Info

简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read

zhengdon 简数采集器

BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure

devsmip BigBuy Dropshipping Connector for WooCommerce

WPSite Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

wpfanyi WPSite Shortcode

Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

surbma Surbma | MiniCRM Shortcode

Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

nootheme Realty Portal

Bulma Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

bartboy011 Bulma Shortcodes

Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update

beycanpress Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO

Display Pages Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

rustybadrobot Display Pages Shortcode

HotelRunner Booking Widget <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

integrationshotelrunner HotelRunner Booking Widget