WordPress Plugin KJM Admin Notices is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. WordPress Plugin KJM Admin Notices version 2.0.1 is vulnerable; prior versions may also be affected.
Edit the source code to ensure that input is properly sanitised or disable the plugin until a fix is available
WordPress Plugin Responsive Clients Logo Gallery for WordPress-Smart Logo Showcase Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.7)
WordPress Plugin Erident Custom Login and Dashboard Cross-Site Scripting (3.5.8)
WordPress Plugin EDD Favorites Cross-Site Scripting (1.0.6)
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.13.59)