>> TAG: #0day

WordPress Polls Widget Plugin 1.0.7 – SQL Injection Vulnerability

OpenMRS 2.3 (1.11.4) – Multiple Cross-Site Scripting Vulnerabilities

PHP Utility Belt – Remote Code Execution

OpenMRS 2.3 (1.11.4) – XML External Entity (XXE) Processing Exploit

dotCMS 3.2.4 – Multiple Vulnerabilities

Cyclope Employee Surveillance <= v8.6.1- Insecure File Permissions

WordPress Plugin Sell Download v1.0.16 – Local File Disclosure

WordPress Plugin Advanced uploader v2.10 – Multiple Vulnerabilities

WordPress Plugin TheCartPress v1.4.7 – Multiple Vulnerabilities

WordPress Users Ultra Plugin 1.5.50 – Blind SQL injection