klikki WordPress Core 4.2 - Persistent Cross-Site Scripting
webapps php OSVDB-121320;CVE-2015-3440

_ikki & paradoxengine PHP 'Exif' Extension - 'exif_read_data()' Remote Denial of Service
dos multiple CVE-2011-0708