WordPress Simple File List plugin <= 3.2.7 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Admavidhya N in WordPress Simple File List plugin versions = 3.2.7. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.8...

WordPress Rencontre – Dating Site plugin <= 3.1.2 - SQL Injection (SQLi) and Cross-Site Scripting (XSS) vulnerabilities

SQL Injection SQLi and Cross-Site Scripting XSS vulnerabilities found by Admavidhya N in WordPress Rencontre – Dating Site plugin versions = 3.1.2. Solution 10 July 2019 - waiting for approval...

WordPress Hostel plugin <= 1.1.3 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability found by Admavidhya N in WordPress Hostel plugin versions = 1.1.3. Solution Update the WordPress Hostel plugin to the latest available version at least 1.1.4...

WordPress Simple File List plugin <= 3.2.4 - Authenticated Arbitrary File Delete vulnerability

Authenticated Arbitrary File Delete vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...

WordPress Simple File List plugin <= 3.2.4 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...