2
The exploits you posted are for various third party XOOPS modules, and not XOOPS itself. The XOOPS team are not responsible for these modules.
Also, you should always contact the module developer first to give them chance to fix the problem, before announcing the exploits to the public.