The sender plugin before 1.2.1 for WordPress has multiple XSS issues.

The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.

The universal-analytics plugin before 1.3.1 for WordPress has XSS.

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.

The profile-builder plugin before 2.2.5 for WordPress has XSS.

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.

Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via an encrypted message sent to DLPe which when decrypted results in DLPe reading unallocated memory.

Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results in DLPe reading unallocated memory.

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. An attacker who is logged into OTRS as an agent user with appropriate permissions can leverage OTRS notification tags in templates in order to disclose hashed user passwords.

An issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. A user logged into OTRS as an agent might unknowingly disclose their session ID by sharing the link of an embedded ticket article with third parties. This identifier can be then be potentially abused in order to impersonate the agent user.

The wp-slimstat plugin before 4.8.1 for WordPress has XSS.

The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.

The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.

The updater plugin before 1.35 for WordPress has multiple XSS issues.

The content-audit plugin before 1.9.2 for WordPress has XSS.

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.