WordPress Newsletter plugin version 4.6.0 suffers from cross site request forgery and cross site scripting vulnerabilities.
9cb12cdbcaf17c9df0d53118baf5921f395e74d64b4f4850784c04d99754e56d
ManageEngine Service Desk Plus version 8 suffers from a directory traversal vulnerability.
4f147a402469540bda70a2d4460e60ce17cdd395e97084b88ed6877689a53c33