WordPress Plugin WP-Mon is prone to an arbitrary file disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid in launching further attacks. WordPress Plugin WP-Mon version 0.5.1 is vulnerable; prior versions may also be affected.
Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available
WordPress Plugin Advanced Text Widget 'page' Parameter Cross-Site Scripting (2.0.0)
WordPress Plugin WooCommerce BuddyPress Integration Unspecified Vulnerability (184.108.40.206)
WordPress Plugin YOP Poll Cross-Site Scripting (6.3.2)
WordPress Plugin GigPress Multiple Vulnerabilities (2.3.10)
WordPress Plugin LMS by LifterLMS-Online Course, Membership & Learning Management System for WordPress Security Bypass (4.21.1)