B1Ue0Cean

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.6.

**Name of the Vulnerable Software and Affected Versions** Unlimited Elements For Elementor versions prior to 2.0.21 **Description** Unlimited Elements for Elementor contains a blind SQL injection flaw. This issue allows unauthenticated remote attackers to extract arbitrary database records by failing to properly neutralize special elements used in an SQL command. Blind SQL injection is a technique that allows an attacker to infer data from a database by observing the application's response to specific queries. **Recommendations** Update to version 2.0.21 or later.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14.