WordPress Plugin NextGEN Gallery-WordPress Gallery is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin NextGEN Gallery-WordPress Gallery version 2.1.7 is vulnerable; prior versions are also affected.
Update to plugin version 2.1.9 or latest
WordPress Plugin WpGenius Job Listing Cross-Site Scripting (1.0.2)
WordPress Plugin VN-Calendar Multiple Cross-Site Scripting Vulnerabilities (1.0)
WordPress Plugin GNU-Mailman Integration Cross-Site Scripting (1.0.6)
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (3.4.17)