Path traversal vulnerability in Gallery may allow admins to read most files on the filesystem
Severity: Medium
Advisories
CSRF/Stored XSS in MSMC – Redirect After Comment could allow unauthenticated individuals to do almost anything
Severity: Medium
CSRF/stored XSS in WordPress Firewall 2 allows unauthenticated attackers to do almost anything an admin can
Severity: Medium
Stored XSS in Relevanssi could allow an unauthenticated attacker to do almost anything an admin can do
Severity: Medium
Reflected XSS in Relevanssi Premium when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can
Severity: Medium
Stop User Enumeration does not stop user enumeration
Severity: Medium
CSRF vulnerability in Multisite Post Duplicator could allow an attacker to do almost anything an admin user can do
Severity: Medium
Arbitrary file deletion vulnerability in Image Slider allows authenticated users to delete files
Severity: Medium
CSRF/stored XSS in Quiz And Survey Master (Formerly Quiz Master Next) allows unauthenticated attackers to do almost anything an admin can
Severity: Medium
CSRF/XSS in Responsive Poll allows unauthenticated attackers to do almost anything an admin can
Severity: Medium