The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.

The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316.

The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.

The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.

The universal-analytics plugin before 1.3.1 for WordPress has XSS.

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.

kernel: out of bounds write in ad5755_parse_dt in drivers/iio/dac/ad5755.c

An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755_parse_dt.

kernel: use-after-free in functions arc_emac_tx and arc_emac_tx_clean in drivers/net/ethernet/arc/emac_main.c

An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.

kernel: use-after-free in fs/gfs2/rgrp.c

An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry.

The olimometer plugin before 2.57 for WordPress has SQL injection.

The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.

The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.

The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.

The uji-countdown plugin before 2.0.7 for WordPress has XSS.

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.