WordPress File Upload <= 4.3.3 – Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9061
WP Background Takeover <= 4.1.4 – Directory Traversal
More info:
https://wpvulndb.com/vulnerabilities/9056
Relevanssi <= 4.0.4 – Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9059
Linux kernel vulnerability CVE-2018-7492
Linux kernel vulnerability CVE-2018-7492. Security Advisory. Security Advisory Description. A NULL pointer dereference ...
More info:
https://support.f5.com/csp/article/K19820866
woocommerce-csvimport 3.3.6 – Authenticated Arbitrary File Deletion
More info:
https://wpvulndb.com/vulnerabilities/9057
Apache mod_auth_digest vulnerability CVE-2018-1312
Apache mod_auth_digest vulnerability CVE-2018-1312. Security Advisory. Security Advisory Description. In Apache httpd ...
More info:
https://support.f5.com/csp/article/K22902581
Contact Form 7 to Database Extension 2.10.32 – CSV Injection
More info:
https://wpvulndb.com/vulnerabilities/9060
DSA-4168 squirrelmail – security update
Florian Grunow and Birk Kauer of ERNW discovered a path traversalvulnerability in SquirrelMail, a webmail application, allowing anauthenticated remote attacker to retrieve or delete arbitrary filesvia mail attachment.
More info:
https://www.debian.org/security/2018/dsa-4168
NTP vulnerability CVE-2018-7185
NTP vulnerability CVE-2018-7185. Security Advisory. Security Advisory Description. The protocol engine in ntp 4.2.6 before ...
More info:
https://support.f5.com/csp/article/K04912972
buddypress-xprofile-custom-fields-type 2.6.3 – Authenticated Arbitrary File Deletion
More info:
https://wpvulndb.com/vulnerabilities/9058