Multiple vulnerabilities affecting two WordPress Plugins (XSS, CSRF & SQLi)

[Summer of Pwnage <lists () securify nl>]

Please see attached advisories for more information. These issues were 
found during Summer of Pwnage (https://sumofpwn.nl), a Dutch community 
project. Its goal is to contribute to the security of popular, widely 
used OSS projects in a fun and educational way.

Attachment: cross_site_request_forgery_vulnerability_in_formbuilder_wordpress_plugin_allows_plugin_permissions_modification.txt
Description:

Attachment: multiple_blind_sql_injection_vulnerabilities_in_formbuilder_wordpress_plugin.txt
Description:

Attachment: persistent_cross_site_scripting_vulnerability_in_user_access_manager_wordpress_plugin.txt
Description: