>> ARCHIVE: 2017-03

WordPress Magic Fields 1 plugin version 1.7.1 suffers from a cross site scripting vulnerability.

WordPress Google Analytics Dashboard plugin version 2.1.1 suffers from a cross site scripting vulnerability.

WordPress Alpine PhotoTile for Instagram plugin version 1.2.7.7 suffers from a cross site scripting vulnerability.

WordPress VaultPress plugin version 1.8.4 suffers from a remote code execution via man-in-the-middle attack vulnerability.

WordPress Popup by Supsystic plugin 1.7.6 suffers from a cross site request forgery vulnerability.

WordPress User Login Log plugin version 2.2.1 suffers from a cross site scripting vulnerability.

WordPress Contact Form Manager plugin suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Contact Form plugin version 4.0.0 suffers from a cross site scripting vulnerability.

X.org suffers from privilege escalation, weak entropy, and use-after-free vulnerabilities.

WordPress WP-SpamFree Anti-Spam plugin version 2.1.1.4 suffers from a cross site scripting vulnerability.