LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated)

Openlitespeed Web Server 1.7.8 - Command Injection (Authenticated) (1)

Wordpress Plugin Simple Job Board 2.9.3 - Authenticated File Read (Metasploit)

Laravel 8.4.2 debug mode - Remote code execution

Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit)

WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit)

Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit)

CSZ CMS 1.2.9 - Multiple Cross-Site Scripting

WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)

Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit)

Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)

Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service

Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)

BigTree CMS 4.4.10 - Remote Code Execution

SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting

Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)