WordPress AllWebMenus plugin versions prior 1.1.9 suffer from a shell upload vulnerability.
d9d3a4d83e0f40943de726f2a02e831f9efe716b709189d367e096aeaa030be2
WordPress Count-Per-Day plugin versions prior to 3.1.1 suffer from cross site scripting and arbitrary file download vulnerabilities.
8dd2986880566874ff8c8bc2d9c51ad28065c7666916931af730b032d4f7bf33
WordPress CartPress plugin versions 1.6 and below suffer from a cross site scripting vulnerability.
10778f8c487c9e9933ff2600fe4718c98638b3a63fc95a9b3b03047d869784bb