WordPress Ultimate Member plugin version 1.3.64 suffers from a local file inclusion vulnerability.
317f09b9e2322d31fa052a7f6ae6448cd8a6fa3943cd7d5493b7a4e3aaf79a11
Joomla Threate component version 1.1.4 suffers from a remote SQL injection vulnerability.
d19753038452b7e8446673cb7af106c669f760838e9c7a6383ec97568aaaae93