Moving any file PHP user has access to in BP Group Documents 1.2.1
Severity: High
Advisories
Directory traversal in NextGEN Gallery 2.0.0
Severity: Medium
XSS via CSRF in Citizen Space 1.0
Severity: Medium
WordPress 3.5.2 contains a plain text content injection vulnerability
Severity: Medium
WordPress 3.5.2 does not hash user_activation_key in the database
Severity: Medium
Cross-site scripting vulnerability in The Events Calendar version 3.0
Severity: Medium
Several SQL injections in BuddyPress 1.7.1
Severity: High
Cross-site scripting vulnerability in ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML, version 1.08
Severity: Medium
Blind SQL injection in Google Analytics Dashboard could cause denial of service or expose database
Severity: High
SQL injections in BuddyPress 1.2.9
Severity: High