WordPress Simple Download Monitor plugin <=3.5.3 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by wpl0v3r in WordPress Simple Download Monitor plugin versions =3.5.3. Vulnerable to Cross-Site Scripting via the sdmupload parameter in an edit action to wp-admin/post.php. Solution Update the WordPress Simple Download Monitor plugin to...

WordPress Media from FTP plugin <=9.84 - Authenticated Directory Traversal vulnerability

Authenticated Directory Traversal vulnerability found by wpl0v3r in WordPress Media from FTP plugin versions =9.84. Vulnerable via exists via the "searchdir" parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI. Solution Update the WordPress Media from FTP plugin to the lates...