King

**Nome do software vulnerável e versões afetadas** Plugin “Pricing Deals for WooCommerce” para WordPress, versões 2.0.2.02 e anteriores **Descrição** O problema decorre da falha do plugin em sanitizar e escapar adequadamente um parâmetro antes de utilizá-lo em uma instrução SQL por meio de uma ação AJAX disponível para usuários não autenticados, levando a uma injeção de SQL não autenticada. **Recomendações** Para as versões 2.0.2.02 e anteriores do plugin Pricing Deals for WooCommerce para WordPress, atualize para uma versão posterior à 2.0.2.02 para resolver o problema.

**Name of the Vulnerable Software and Affected Versions** vim versions prior to 8.0.0377 **Description** The issue arises from an integer overflow at a u read undo memory allocation site. This occurs when vim does not properly validate values for tree length while reading a corrupted undo file, potentially leading to buffer overflows. **Recommendations** For versions prior to 8.0.0377, update to a version that includes patch 8.0.0377 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** vim versions prior to 8.0.0378 **Description** The issue arises from an integer overflow at an unserialize uep memory allocation site. This occurs when vim does not properly validate values for tree length while reading a corrupted undo file, potentially leading to buffer overflows. **Recommendations** For versions prior to 8.0.0378, update to version 8.0.0378 or later to resolve the issue. As a temporary workaround, consider avoiding the use of corrupted undo files until a patch is applied. Restrict access to potentially malicious undo files to minimize the risk of exploitation.