>> TAG: #0day

WordPress Import CSV Plugin 1.0 – Directory Traversal

WordPress Image Export Plugin 1.1.0 – Arbitrary File Disclosure

Xoops 2.5.7.2 – Directory Traversal Bypass

Windows – Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032)

Xoops 2.5.7.2 – Arbitrary User Deletions CSRF

WordPress Abtest Plugin – Local File Inclusion

D-Link DWR-932 Firmware 4.00 – Authentication Bypass

WordPress eBook Download Plugin 1.1 – Directory Traversal

Disc ORGanizer – DORG – Multiple Vulnerabilities

Wildfly – WEB-INF and META-INF Information Disclosure via Filter Restriction Bypass