Glyn Wintle

**Nome do software vulnerável e versões afetadas** Versões do WP Fastest Cache até a 0.9.0.2 **Descrição** O plugin WP Fastest Cache para WordPress está vulnerável à exclusão arbitrária e não autorizada de arquivos devido à falta de verificação de permissões e à validação insuficiente de caminhos. Isso permite que usuários autenticados com permissões mínimas excluam arquivos arbitrários do servidor. **Recomendações** Para versões até 0.9.0.2, atualize para a versão mais recente para mitigar o risco de exclusão arbitrária de arquivos. Como solução temporária, considere restringir o acesso a arquivos e diretórios confidenciais no servidor até que a atualização seja aplicada.

**Name of the Vulnerable Software and Affected Versions** The Post Indexer plugin versions prior to 3.0.6.2 for WordPress **Description** The issue is related to incorrect handling of data passed to the `unserialize` function. This can potentially lead to security issues. **Recommendations** For versions prior to 3.0.6.2, update to version 3.0.6.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `unserialize` function until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** The Post Indexer plugin versions prior to 3.0.6.2 for WordPress **Description** The issue concerns SQL injection via the `period` parameter, which can be exploited by a super admin. **Recommendations** For versions prior to 3.0.6.2, update to version 3.0.6.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the `period` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Relevanssi Premium plugin versions prior to 1.14.6.1 **Description** The issue concerns SQL injection with resultant unsafe unserialization. **Recommendations** For versions prior to 1.14.6.1, update to version 1.14.6.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Xen Mobile versions prior to 10.8.0 **Description** The issue arises from a service listening on port 5001 within the firewall of Xen Mobile, which accepts unauthenticated input. This service deserializes raw serialized Java objects into Java objects in memory, potentially leading to remote code execution. The vendor disputes this as a vulnerability, citing mitigation by an internal firewall limiting access to configuration services to localhost. **Recommendations** For versions prior to 10.8.0, as a temporary workaround, consider restricting access to the service listening on port 5001 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Citrix Xen Mobile versions through 10.8 **Description** The issue allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000, and 30001. The vendor disputes that this is an issue, stating it is already mitigated by the internal firewall that limits access to configuration services to localhost. **Recommendations** For Citrix Xen Mobile versions through 10.8, consider restricting access to the private services listening on ports 8000, 30000, and 30001 to minimize the risk of exploitation. As a temporary workaround, limit the ability of low-privileged local users to make requests to these services until a more definitive resolution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Redirection version 2.7.1 **Description** The issue is related to a Serialisation vulnerability in the Settings page AJAX, which could allow an admin to execute arbitrary code under certain circumstances. This attack is exploitable if the attacker has access to an admin account. **Recommendations** For version 2.7.1, update to version 2.8 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Redirection version 2.7.3 **Description** The issue allows admins to execute any PHP file in the filesystem due to an ACE via file inclusion vulnerability in Pass-through mode. This can be exploited if an attacker has access to an admin account on the target site. **Recommendations** For version 2.7.3, update to version 2.8 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Ajax Pagination (twitter Style) plugin version 1.1 for WordPress **Description** The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. (dot dot) in the `loop` parameter in an `ajax navigation` action to the "wp-admin/admin-ajax.php" endpoint. **Recommendations** For Ajax Pagination (twitter Style) plugin version 1.1, consider disabling the `ajax navigation` action to `wp-admin/admin-ajax.php` until a patch is available. Avoid using the `loop` parameter in the affected endpoint until the issue is resolved.