WordPress SEO (Yoast SEO) plugin versions 9.1 and below suffer from a race condition that allows for command execution.

It was discovered that the Unitrends bpserverd proprietary protocol, as exposed via xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue…

Joomla Fabrik component version 3.9 suffers from cross site request forgery, local file inclusion, and remote shell upload vulnerabilities.

Joomla DJ Image Slider component version 3.2.3 suffers from a database disclosure vulnerability.

Joomla Event Booking component version 3.8.3 suffers from a database backup disclosure vulnerability.

WordPress allow-l10n-upload-filename plugin version 1.0 suffers from an arbitrary file download vulnerability.

WordPress sermon-shortcodes plugin version 1.0 suffers from an arbitrary file download vulnerability.

WordPress uploadingdownloading-non-latin-filename plugin version 1.1.5 suffers from an arbitrary file download vulnerability.

WordPress hwm_board plugin version 1.0 suffers from an arbitrary database download vulnerability.

WordPress user-spam-remover plugin version 1.0 suffers from a database backup disclosure vulnerability.