>> ARCHIVE: 2022-04

WordPress Hummingbird plugin versions prior to 3.3.2 suffers from a persistent cross site scripting vulnerability.

minewebcms version 1.15.2 suffers from a cross site scripting vulnerability.

qdPM version 9.2 suffers from a cross site request forgery vulnerability.

WordPress UpdraftPlus versions prior to 1.22.9 suffers from a cross site scripting vulnerability.

WordPress WP Downgrade plugin versions prior to 1.2.3 suffer from a persistent cross site scripting vulnerability.

KLiK Social Media Website version 1.0 suffers from multiple remote SQL injection vulnerabilities.

Backdoor.Win32.Verify.h malware suffers from a remote command execution vulnerability.

Backdoor.Win32.XLog.21 malware suffers from an authentication bypass vulnerability due to a race condition.