WHMCS appears to suffer from a cross site request forgery vulnerability.
b5796b396efd0618d69da2887baf2e280c72e6f06191cd17881fdc38654ec207
The WordPress Zingiri Tickets plugin suffers from a file disclosure vulnerability that holds administrative username and password hashes.
892b3d05968e8c76e93a0c032ea0704ecd6db0ee18f2a3afcc6db8d331fc0efb