RVSiteBuilder RVGlobalSoft CMS version 7.0 suffers from bypass, database disclosure, file download, path disclosure, remote file upload, and remote SQL injection vulnerabilities.

Slims CMS Senayan Library Management System version 7.0 suffers from a remote shell upload vulnerability.

TinyMCE JBimages plugin versions 3.x from JustBoilMe suffers from an arbitrary file upload vulnerability.

WordPress Jssor-Slider plugin version 3.1.24 suffers from cross site request forgery and remote file upload vulnerabilities.

WordPress WP-JS-External-Link-Info plugin version 2.2.0 suffers from an open redirection vulnerability.

Zend Framework version 1.11.11 suffers from a database configuration file disclosure vulnerability.

Zend Framework ZF1 version 1.x suffers from a database configuration file disclosure vulnerability.

ZRECore version 1.3.1 suffers from a database configuration file disclosure vulnerability.

GetSimpleCMS version 3.3.13 suffers from an open redirection vulnerability.