WordPress LayerSlider plugin <=6.2.0 - Cross-Site Request Forgery (CSRF) vulnerability

The Cross-site Request Forgery CSRF vulnerability found by WPHutte in WordPress LayerSlider plugin version 6.2.0 and this vulnerability could lead to Cross-Site Scripting XSS and SQL Injection vulnerabilities. Solution Update the WordPress LayerSlider plugin to the latest available version at lea...

WordPress Real Estate 7 theme 2.5.6 - Authenticated Arbitrary File Upload vulnerability

The Authenticated Arbitrary File Upload vulnerability found by WPHutte in WordPress Real Estate 7 theme version 2.5.6 Solution Update WordPress Real Estate 7 theme to the latest available version at least version 2.5.9...