WP Job Manager <= 1.31.2 – Phar Deserialization
More info:
https://wpvulndb.com/vulnerabilities/9193
WP AutoSuggest 0.24 – Unauthenticated SQL Injection
More info:
https://wpvulndb.com/vulnerabilities/9188
Audio Record 1.0 – Arbitrary File Upload
More info:
https://wpvulndb.com/vulnerabilities/9191
Two Factor Authentication <= 1.3.12 – Disable Two Factor Authentication CSRF
More info:
https://wpvulndb.com/vulnerabilities/9187
Google XML Sitemaps <= 4.0.9 – Authenticated Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9189
Multi Step Form <= 1.2.5 – Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9186
Adicon Server <= 1.2 – SQL Injection
More info:
https://wpvulndb.com/vulnerabilities/9192
Import users from CSV with meta <= 1.12 – Import Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9176
Import users from CSV with meta <= 1.12 – Import Cross-Site Scripting (XSS)
More info:
https://wpvulndb.com/vulnerabilities/9176
WordPress <= 5.0 – File Upload to XSS on Apache Web Servers
More info:
https://wpvulndb.com/vulnerabilities/9175