WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Eventer - WordPress Event & Booking Manager Plugin plugin 3.9.9 - Reflected Cross Site Scripting XSS vulnerability discovered by Nguyễn Trung Kiên anhchangmutrang in WordPress Plugin Eventer versions 3.9.9...

WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyễn Trung Kiên Patchstack Alliance in WordPress Plugin Surfer versions = 1.5.0.502...