WordPress Blackhole for Bad Bots plugin <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing vulnerability

Arbitrary IP Address Blocking via IP Spoofing vulnerability discovered by Daniel Ruf in WordPress Blackhole for Bad Bots plugin versions = 3.3.1. Solution Update the WordPress Blackhole for Bad Bots plugin to the latest available version at least 3.3.2...

WordPress Wyzi premium theme <= 2.4.2 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Daniel Ruf in WordPress Wyzi premium theme versions = 2.4.2. Solution Update the WordPress Wyzi premium theme to the latest available version at least 2.4.3...

WordPress JobMonster premium theme <= 4.6.6 - Directory Listing in Upload Folder vulnerability

Directory Listing in Upload Folder vulnerability found by Daniel Ruf in WordPress JobMonster premium theme versions = 4.6.6. Solution Update the WordPress JobMonster premium theme to the latest available version at least 4.6.6.1...

WordPress JobSearch premium plugin <= 1.5.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Daniel Ruf in WordPress JobSearch premium plugin versions = 1.5.0. Solution Update the WordPress JobSearch premium plugin to the latest available version at least 1.5.1...