Abdulrahman Nour, Mandiant

SQL Injection Vulnerability in Explorance Blue

SQL Injection Vulnerability in Explorance Blue

Unrestricted File Upload Vulnerability in Explorance Blue

Unauthenticated Remote File Download in Explorance Blue

Use of a hardcoded static key to protect sensitive data in Explorance Blue

WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation