CVE's SQL Injection in Koha (CVE-2025-22954) Drag and Drop Multiple File Upload Wordpress Plugin < 1.1.1 - Unauthenticated Stored Cross-Site Scripting (CVE-2023-4821) Shared Files Wordpress Plugin <= 1.7.6 - Unauthenticated Stored Cross-Site Scripting (CVE-2023-4819)