The Mang Board WordPress plugin contains a severe file upload vulnerability in versions up to 2.4.4, enabling remote code execution by unauthenticated attackers.
A critical vulnerability in the 10Web Booster WordPress plugin enables attackers to upload executable files via a leaked nonce, affecting versions up to 2.34.10.