Super CMS Blog Pro PHP Script version 1.0 suffers from shell upload and remote SQL injection vulnerabilities.

WordPress Strong Testimonials plugin version 2.31.4 suffers from a cross site scripting vulnerability.

WordPress Gwolle Guestbook plugin version 2.5.3 suffers from a cross site scripting vulnerability.

SoftNAS Cloud versions prior to 4.0.3 suffers from an OS command injection vulnerability.

Online Trade version 1 suffers from an information leakage vulnerability.

NetScanTools Basic Edition version 2.5 Hostname denial of service proof of concept exploit.

QNap QVR Client version 5.1.1.30070 Password denial of service proof of concept exploit.

This Metasploit module exploits an arbitrary file upload vulnerability in Responsive Thumbnail Slider Plugin v1.0 for WordPress post authentication.