Wordpress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via titleFont Parameter vulnerability discovered by stealthcopter in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.2.38...

WordPress Download Manager plugin <= 3.2.38 - Unauthenticated Brute Force of Files Master Key vulnerability

Unauthenticated Brute Force of Files Master Key vulnerability discovered by Diogo Real in WordPress Download Manager plugin versions = 3.2.38. Solution Update the WordPress Download Manager plugin to the latest available version at least 3.2.39...