WordPress Yuzo Related Posts plugin <=5.12.91 - Broken authentication

Broken authentication and session management allows unauthenticated call any action or update any option on WordPress Yuzo Related Posts plugin versions =5.12.91. Solution 10 April 2019 - this plugin was closed and is no longer available for download...

Webapp builder 2.0 - Unauthenticated File Upload

Plugin is still affected and has been closed...

S3Bubble <= 0.7 - Directory Traversal leading to Arbitrary File Access

The last time it was checked the plugin was still affected and had been closed...