- Acespritech Solutions Pvt. Ltd.'s Social Link Groups has an SQL Injection vulnerability that allows Blind SQL Injection, affecting versions from n/a through 1.1.0. - Apache CloudStack has a vulnerability where new ConfigSets created via a Restore command are not set as "trusted," which could lead to loading custom code into classloaders, affecting versions from 6.6.0 before 8.11.4 and 9.0.0 before 9.7.0. - Apache Solr has an Authentication bypass vulnerability due to improper default initialization of resources, affecting versions from 6.6.0 before 8.11.4 and 9.0.0 before 9.7.0. - Apache CloudStack has a vulnerability where users can be tricked into submitting malicious CSRF requests due to missing validation of the origin of requests, affecting versions from 4.15.1.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1. - Arisoft's ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to lack of file access controls, affecting versions up to, and including, 1.1.14. - Arraytics' WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference, affecting versions up to, and including, 1.0.25. - Ahime's Ahime Image Printer has a Path Traversal vulnerability, affecting versions from n/a through 1.0.0. - Anand23's Recently plugin for WordPress has an Authentication bypass vulnerability, affecting versions from n/a through 1.1. - Arif Nezami's Better Author Bio plugin for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability, affecting versions from n/a through 2.7.10.11. - Apa's APA Register Newsletter Form and Apa Banner Slider plugins for WordPress have Cross-Site Request Forgery (CSRF) vulnerabilities, affecting versions from n/a through 1.0.0.