WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin DirectoryPress versions = 3.6.25...

WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin SupportCandy versions = 3.4.1...