20170707 Vulnerable Plugins/Themes Report

	A	B	C	D	E	F	G	H	I	J
1	Name	Version(s) Affected	Fixed in Version	Plugin Directory	Vulnerability	Link/Plugin Status	Suggested Action	Plugin/Theme	Other Notes	Source

2	Responsive Lightbox by dFactory	1.7.1 and earlier	1.7.2	responsive-lightbox	Cross-Site Scripting	https://wordpress.org/plugins/responsive-lightbox/	Update	Plugin		http://jvn.jp/en/jp/JVN39819446/
3	WP Statistics	12.0.8.1 and earlier	12.0.9	wp-statistics	Authenticated Cross-Site Scripting	https://wordpress.org/plugins/wp-statistics/	Update	Plugin		http://blog.dewhurstsecurity.com/2017/07/03/wp-statistics-authenticated-xss-vulnerability.html
4	Shortcodes Ultimate	4.9.9 and earlier	4.10.0	shortcodes-ultimate	Directory Traversal	https://wordpress.org/plugins/shortcodes-ultimate/	Update	Plugin		http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000164.html
5	Post Custom Templates Lite	1.6 and earlier	1.7	post-custom-templates-lite	Stored Cross-Site Scripting/Cross-Site Request Forgery	https://wordpress.org/plugins/post-custom-templates-lite/	Update	Plugin		https://www.pluginvulnerabilities.com/2017/07/05/persistent-cross-site-scripting-xss-vulnerability-in-post-custom-templates-lite/
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100