Reflected XSS in The Events Calendar: Eventbrite Tickets allows unauthenticated users to do almost anything an admin can
Severity: Medium
Advisories
Stored XSS in Plotly allows less privileged users to insert arbitrary JavaScript into posts
Severity: Medium
CSRF/XSS vulnerability in Private Only could allow an attacker to do almost anything an admin user can
Severity: Medium
Local File Include vulnerability in GD bbPress Attachments allows attackers to include arbitrary PHP files
Severity: Medium
Reflected XSS in GD bbPress Attachments allows an attacker to do almost anything an admin can
Severity: Medium
Publicly exploitable XSS in WordPress plugin Navis Documentcloud
Severity: Medium
Reflected XSS in Citizen Space allows attackers to view sensitive information of the attacker’s choosing
Severity: Medium
CSRF in Contact Form DB allows attacker to delete all stored form submissions
Severity: Medium
Publicly exploitable command injection in ruby-saml library can lead to arbitrary command execution
Severity: High
CSRF and stored XSS in WordPress Content Slide allow an attacker to have full admin privileges
Severity: Medium