>> ARCHIVE: 2016-02

WordPress Simple Add Pages Or Posts plugin version 1.6 suffers from a cross site request forgery vulnerability.

translate.avira.com suffers from a cross site scripting vulnerability.

ManageEngine Network Configuration Management build 11000 suffers from a cross site request forgery vulnerability.

ManageEngine Eventlog Analyzer versions 4.0 through 10 suffer from a privilege escalation vulnerability.

iScripts EasyCreate version 3.0 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

iScripts EasyCreate version 3.0 remote code execution exploit.

Winhex Editor versions 18.7 and below suffer from a dll hijacking vulnerability.

WordPress Comment Rating plugin version 1.5.0 suffers from a cross site scripting vulnerability.

Hippo CMS version 10.1 suffers from a stored cross site scripting vulnerability.

Hippo CMS version 10.1 suffers from an XML External Entity information disclosure vulnerability.