apple502j

Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change

Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting

URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRF

Compact WP Audio Player < 1.9.7 - Contributor+ Stored Cross-Site Scripting

Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting

Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF

Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting

Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update

Compact WP Audio Player < 1.9.7 - Setting Change via CSRF

Stylish Price List < 6.9.0 - Unauthenticated Arbitrary Image Upload