Neven Biruski

The issue allows for CSRF via the "wp-admin/admin-ajax.php" action parameter, potentially leading to local file inclusion through directory traversal. This is due to a discrepancy between the `$ POST['action']` value and the `$ GET['action']` value, where the latter is unsanitized.

The issue allows for XSS attacks via the `text` or `tab` parameter.

A security issue exists in the admin/gb-dashboard-widget.php file of the Gwolle Guestbook plugin for WordPress. This issue can be exploited via the PATH INFO to wp-admin/index.php, allowing for potential attacks.

A Cross Site Scripting (XSS) issue exists, allowing exploitation via the `date1` or `date2` parameter to the "wp-admin/options-general.php" API endpoint.

The issue concerns SQL injection in the delete action of the Easy Modal plugin, specifically affecting the `id`, `ids`, or `modal` parameter to `wp-admin/admin.php`. This can be exploited by administrators.

The issue concerns SQL injection in the Easy Modal plugin for WordPress. It affects the untrash action and involves the `id`, `ids`, or `modal` parameter to "wp-admin/admin.php". This exploit is accessible by administrators.