WordPress Ultimate Member plugin <= 2.1.19 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Riki Aji in WordPress Ultimate Member plugin versions = 2.1.19. Solution Update the WordPress Ultimate Member plugin to the latest available version at least 2.1.20...

WordPress Brizy – Page Builder plugin <= 1.0.113 - Unauthenticated Site Settings Update vulnerability

Unauthenticated Site Settings Update vulnerability discovered by Riki Aji in WordPress Brizy – Page Builder plugin versions = 1.0.113. Solution Update the WordPress Brizy – Page Builder plugin to the latest available version at least 1.0.114...