Multiple vulnerabilities have been discovered in various products, including WordPress plugins, firmware, and software. The a1post A1POST.BG Shipping for Woo plugin has a Cross-Site Request Forgery vulnerability that allows privilege escalation. The WPMobile.App plugin has an Open Redirect vulnerability that can redirect users to malicious sites. The Option Editor plugin has a Cross-Site Request Forgery vulnerability that allows updating arbitrary options on a WordPress site. Baiyi Cloud Asset Management System has multiple SQL injection vulnerabilities that can be exploited remotely. BDCOM Behavior Management and Auditing System has an OS command injection vulnerability that can be launched remotely. The CarSpot - Dealership WordPress Classified Theme has a privilege escalation vulnerability that allows account takeover. binance-trading-bot has a command injection vulnerability that allows remote code execution. ChurchCRM has a time-based blind SQL Injection vulnerability that allows arbitrary SQL queries. Multiple other products, including Dell Client Platform BIOS, Dell NetWorker Management Console, and denx U-Boot, have vulnerabilities that can be exploited to gain elevated privileges or execute arbitrary code.