The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.

kernel: out of bounds write in ad5755_parse_dt in drivers/iio/dac/ad5755.c

An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755_parse_dt.

kernel: use-after-free in functions arc_emac_tx and arc_emac_tx_clean in drivers/net/ethernet/arc/emac_main.c

An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.

kernel: use-after-free in fs/gfs2/rgrp.c

An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry.

The olimometer plugin before 2.57 for WordPress has SQL injection.

The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.

The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.

The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.

The uji-countdown plugin before 2.0.7 for WordPress has XSS.

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.

The total-security plugin before 3.4.1 for WordPress has XSS.

The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.

The seo-redirection plugin before 4.3 for WordPress has stored XSS.

The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scrolling, "pinch and zoom" gestures, or even regular mouse clicks (by depressing the touchpad once and then clicking with a different finger).

The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.

The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.