>> ARCHIVE: 2016-11

The vulnerability laboratory core research team discovered a remote sql-injection vulnerability in the official Schoolho…

Red Jasmin version 1.0 suffers from a remote SQL injection vulnerability.

WordPress MailChimp plugin version 4.0.l7 suffers from cross site request forgery and cross site scripting vulnerabilities.

FTPShell Client version 5.24 PWD remote buffer overflow exploit.

WordPress Check Email plugin version 0.3 suffers from a cross site scripting vulnerability.

WordPress Easy Facebook Like Box plugin version 4.3.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Huge IT Portfolio Gallery plugin version 2.0.77 suffers from a cross site scripting vulnerability.

WordPress Instagram Feed plugin version 1.4.6.2 suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Canvas – Shortcodes plugin version 1.92 suffers from a persistent cross site scripting vulnerability.

Joomla K2 extension versions 2.5.0 through 2.7.1 suffer from cross site request forgery and remote shell upload vulnerabilities.