Adobe's Bridge and InDesign Desktop are vulnerable to several issues including integer overflow, heap-based buffer overflow, and out-of-bounds write vulnerabilities that could lead to arbitrary code execution. Automattic's Newspack Blocks has a path traversal vulnerability allowing file manipulation. Codeless' Cowidgets Elementor Addons also has a path traversal issue. Crocoblock's JetThemeCore has a file manipulation vulnerability due to improper path limitation. Decidim, a participatory democracy framework, is vulnerable to XSS attacks through a malformed URL. Delta Electronics' CNCSoft-G2 lacks proper validation of user data, leading to potential code execution. Directus, a real-time API and app dashboard, allows user enumeration when using SSO providers. D-Link's DIR-823X firmware contains a remote command execution vulnerability. The Advanced AJAX Page Loader and Advanced File Manager Shortcodes plugins for WordPress are vulnerable to CSRF and SQL injection, respectively. The Bit Form plugin for WordPress has a path traversal vulnerability. Codermy's my-springsecurity-plus has SQL injection vulnerabilities in various endpoints. Booking Ultra Pro has a path traversal issue. Deano1987's Advanced AJAX Page Loader plugin for WordPress is vulnerable to CSRF and arbitrary file uploads.