Alt-N MDaemon webmail 20.0.0 – ‘Contact name’ Stored Cross Site Scripting (XSS)

Alt-N MDaemon webmail 20.0.0 – ‘file name’ Stored Cross Site Scripting (XSS)

YetiShare File Hosting Script 5.1.0 – ‘url’ Server-Side Request Forgery

SmartFoxServer 2X 2.17.0 – God Mode Console Remote Code Execution

WordPress Plugin Supsystic Contact Form 1.7.5 – Multiple Vulnerabilities

WordPress Plugin Supsystic Pricing Table 1.8.7 – Multiple Vulnerabilities

Millewin 13.39.146.1 – Local Privilege Escalation

WordPress Plugin Welcart e-Commerce 2.0.0 – ‘search[order_column][0]’ SQL injection

Jenzabar 9.2.2 – ‘query’ Reflected XSS.