CVE-2016-10982 (kento-post-view-counter)

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.

CVE-2016-10980 (kento-post-view-counter)
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo. View Full Alert
CVE-2016-10981 (kento-post-view-counter)
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. View Full Alert
CVE-2016-10948 (post_indexer)
The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function. View Full Alert