Joomla! Core is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Joomla! Core versions 3.x.x ranging from 3.2.0 and up to and including 3.4.4 are vulnerable.
Update to Joomla! Core version 3.4.5 or latest
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.3.17)
WordPress Plugin Register Plus Redux 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities (3.6.1)
WordPress Plugin Membership by Supsystic SQL Injection (1.4.7)
WordPress Plugin Custom Map Cross-Site Scripting (1.1)
WordPress Plugin SEO SearchTerms Tagging 2 Multiple Vulnerabilities (1.535)