Rating-Widget: Star Review System allows anybody to turn on debug mode and view errors and warnings
Severity: Medium
Advisories
Like Button Rating ♥ LikeBtn allows anybody to set any option
Severity: Medium
SQLi in Relevanssi might allow an admin to read contents of database
Severity: High
Xen Mobile leaks device information including personal data
Severity: Medium
Xen Mobile contains a vulnerable version of Hazelcast, remote code execution via object serialisation
Severity: High
Untrusted deserialisation in Xen Mobile 10.6 through 10.8 allows network adjacent unauthenticated users to remotely execute code
Severity: High
Xen Mobile contains a reflected cross-site scripting vulnerability
Severity: Medium
Xen Mobile contains open redirect vulnerabilities
Severity: Medium
Lack of authentication in Citrix Xen Mobile 10.6 through 10.8 allows low-privileged local users to execute system commands as root
Severity: High
Xen Mobile: Insufficient path validation in unzip API call allows attackers to write to arbitrary files and remotely execute code
Severity: High