WordPress International SMS for Contact Form 7 Integration plugin version 1.2 suffers from a cross site scripting vulnerability.
WordPress Plugin Simple Job Board 2.9.3 – Local File Inclusion
Wing FTP Server 4.3.8 – Remote Code Execution (RCE) (Authenticated)
WordPress Plugin International Sms For Contact Form 7 Integration V1.2 – Cross Site Scripting (XSS)
Hospital Management System 4.0 – ‘multiple’ SQL Injection
FileBrowser 2.17.2 – Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)
Hotel Reservation System 1.0 – SQLi (Unauthenticated)
Strapi CMS 3.0.0-beta.17.4 – Set Password (Unauthenticated) (Metasploit)
WordPress IP2Location Country Blocker plugin version 2.26.7 suffers from a persistent cross site scripting vulnerability.
FLAME II MODEM USB suffers from an unquoted service path vulnerability.