Application: Joomla!
Affected Version: versions prior to 3.0.11.
Vendor’s URL: Projectfork Component
Bug Type: SQL Injection
Risk Level: Critical
Solution:
Update to version 3.0.11.
Application: WordPress
Affected Version: version 0.4.3 and prior version
Vendor’s URL: FunCaptcha Plugin
Bug Type: Cross-Site Scripting
Risk Level: Medium
Solution:
Update to version 0.4.4.
Application: Drupal
Affected Version: versions prior to 7.x-1.12.
Vendor’s URL: EU Cookie Compliance Module
Bug Type: Cross Site Scripting
Risk Level: Medium
Solution:
Update to version 7.x-1.12.
Application: WHMCS
Affected Version: versions prior to 5.1.14 and 5.2.13.
Vendor’s URL: WHMCS
Bug Type: Code Execution
Risk Level: Critical
Solution:
Update to version 5.1.14 and 5.2.13.
Application: WordPress
Affected Version: versions prior to 4.0.2.
Vendor’s URL: Tweet Blender Plugin
Bug Type: Cross-Site Scripting
Risk Level: Critical
Solution:
Update to version 4.0.2.
Application: WordPress
Affected Version: -
Vendor’s URL: This Way Theme
Bug Type: File Upload
Risk Level: Critical
Solution:
No official solution is currently available.
Application: Joomla!
Affected Version: versions prior to 2.5.15, 3.1.6, and 3.2.
Vendor’s URL: Joomla!
Bug Type: Cross Site Scripting
Risk Level: Medium
Solution:
Update to version 2.5.15, 3.1.6, or 3.2.
Application: WordPress
Affected Version: versions prior to 2.20.
Vendor’s URL: Gallery Bank Plugin
Bug Type:
Risk Level: Critical
Solution:
Update to version 2.20.
Application: Simple Machines Forum
Affected Version: versions prior to 2.0.6 and 1.1.19.
Vendor’s URL: Simple Machines Forum
Bug Type: System access
Risk Level: Critical
Solution:
Update to version 2.0.6 or 1.1.19.
Application: WordPress
Affected Version: version 3.0 and other versions.
Vendor’s URL: Quick Paypal Payments Plugin
Bug Type: Cross Site Scripting
Risk Level: Critical
Solution:
No official solution is currently available.
Application: Drupal
Affected Version: versions prior to 6.x-1.5 and prior to 7.x-1.1.
Vendor’s URL: Simplenews Module
Bug Type: Cross Site Scripting
Risk Level: Critical
Solution:
Update to version 6.x-1.5 or 7.x-1.1.
Application: Bilboplanet
Affected Version: version 2.0 and other versions.
Vendor’s URL: Bilboplanet
Bug Type: Cross-Site Scripting and SQL Injection
Risk Level: Critical
Solution:
No official solution is currently available.
Application: osCommerce
Affected Version: version 2.3.3 and prior versions.
Vendor’s URL: osCommerce
Bug Type: Cross Site Scripting
Risk Level: Critical
Solution:
Update to version 2.3.3.1.
Application: WordPress
Affected Version: version 1.2.3 and prior versions.
Vendor’s URL: Landing Pages Plugin
Bug Type: SQL Injection
Risk Level: Critical
Solution:
Update to version 1.2.3 (10/09/13).
Application: WordPress
Affected Version: version 6.0 and prior versions.
Vendor’s URL: Quick Contact Form Plugin
Bug Type: Cross Site Scripting
Risk Level: Critical
Solution:
Update to version 6.1.
Application: WordPress
Affected Version: version 1.4 and other versions.
Vendor’s URL: SEO Watcher Plugin
Bug Type: File Creation
Risk Level: Critical
Solution:
No official solution is currently available.
Application: WordPress
Affected Version: version 2.1.2
Vendor’s URL: WP-SlimStat-Ex Plugin
Bug Type: System Access
Risk Level: Critical
Solution:
No official solution is currently available.
Application: glFusion
Affected Version: version 1.3.0 and prior versions.
Vendor’s URL: glFusion
Bug Type: SQL Injection
Risk Level: Critical
Solution:
Update to version 1.3.1.
Application: WordPress
Affected Version: versions prior to 3.7
Vendor’s URL: Design Approval System Plugin
Bug Type: Cross-Site Scripting
Risk Level: Critical
Solution:
Update to version 3.7.
Application: MediaWiki
Affected Version: versions prior to 11.38.2.6 and 11.39.0.15.
Vendor’s URL: CentralAuth Extension
Bug Type: Security Bypass
Risk Level: Critical
Solution:
Update to a fixed version.