>> ARCHIVE: 2020-02

QuickDate version 1.3.2 suffers from a remote SQL injection vulnerability.

Google Invisible RECAPTCHA version 3 suffers from a spoofing bypass vulnerability.

ExpertGPS version 6.38 suffers from an XML external entity injection vulnerability.

Wedding Slideshow Studio version 1.36 suffers from a buffer overflow vulnerability.

LearnDash WordPress LMS plugin version 3.1.2 suffers from a cross site scripting vulnerability.

This Metasploit module exploits an authentication bypass in the WordPress InfiniteWP Client plugin to log in as an administrator and execute arbitrary PHP code by overwriting the file specified by…

Vanilla Forum version 2.6.3 suffers from a persistent cross site scripting vulnerability.