Recent vulnerabilities and exploits

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations....

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF....

The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF....

The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF....

The companion-auto-update plugin before 3.2.1 for WordPress has CSRF....

The xo-security plugin before 1.5.3 for WordPress has XSS....

The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues....

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection....

The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms....

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection....