JSN Power Admin,2.3.0,XSS (Cross Site Scripting)
Resolution: update to 2.3.2
Update notice: http://www.joomlashine.com/knowledgeportal/articles/jsn-poweradmin-vulnerability-problem-solved.html
Note that previous security release 2.3.1 is still vulnerable, and should be updated...
Breezing Forms Full before build 884
Breezing Forms Lite before build 912
Information disclosure
Resolution: update to latest version
Update notice: https://crosstec.org/en/blog/859-breezingforms-medium-security-update.html...
Form Maker versions before 3.6.0 XSS
Resolution: update to 3.6.0
Update notice: https://web-dorado.com/products/joomla-form.html...
Spider random articles versions before 1.5.3
Resolution: update to 1.5.3
Update notice: https://web-dorado.com/products/joomla-random.html...
EasySocial versions before 1.4.7: Code injection
Resolution: update to 1.4.7
Update notice: http://stackideas.com/blog/critical-update-for-easysocial-update-to-1-4-7-now...
Resize Image On The Fly and Cache - content plugin by s2software.it
Version 1.1.0 and likely all previous
Open folder permissions
Resolution: update to version 1.3.3
Existing users will need to manually fix the permissions of folder /images/cache to 755 or delete it in order to be recreated by the plugin with the proper permissions
Update notice:...