>> TAG: #0day

IOTransfer V4 – Unquoted Service Path

SmartRG Router SR510n 2.6.13 – RCE (Remote Code Execution)

WordPress Plugin ImageMagick-Engine 1.7.4 – Remote Code Execution (RCE) (Authenticated)

WordPress Plugin Zephyr Project Manager 3.2.42 – Multiple SQLi

Feehi CMS 2.1.1 – Remote Code Execution (RCE) (Authenticated)

TP-Link Tapo c200 1.1.15 – Remote Code Execution (RCE)

Teleport v10.1.1 – Remote Code Execution (RCE)

WordPress Plugin WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS)

WordPress Plugin 3dady real-time web stats 1.0 – Stored Cross Site Scripting (XSS)