Rio Darmawan

**Nome do Software Vulnerável e Versões Afetadas** O nome do produto não pôde ser determinado (versões afetadas não especificadas) **Descrição** Existe uma forma de contornar uma correção anterior. O problema pode ser acionado enviando um identificador de plugin não permitido, mas válido, através da variável `type` ou utilizando o método de API XML-RPC `ox.setChannelTargeting`. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Nome do Software Vulnerável e Versões Afetadas** Schema App Structured Data versões 1.23.1 e anteriores **Descrição** O problema está relacionado a uma vulnerabilidade de Autorização Ausente no Schema App Structured Data, que permite explorar níveis de segurança de controle de acesso configurados incorretamente. **Recomendações** Para as versões 1.23.1 e anteriores, atualize para uma versão superior à 1.23.1 para resolver o problema. Como solução temporária, considere restringir o acesso a dados sensíveis para minimizar o risco de exploração.

**Nome do software vulnerável e versões afetadas** Fantastic Content Protector Free, versões 2.6 e anteriores **Descrição** O problema está relacionado a uma vulnerabilidade de falta de autorização, que permite a exploração de níveis de segurança de controle de acesso configurados incorretamente. **Recomendações** Para as versões 2.6 e anteriores, atualize para uma versão que contenha uma correção para este problema, pois a versão atual apresenta uma vulnerabilidade de falta de autorização. No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Max Chirkov Advanced Text Widget, versões 2.1.2 e anteriores **Descrição** O problema está relacionado à falta de autorização, permitindo a exploração de níveis de segurança de controle de acesso configurados incorretamente. **Recomendações** Para o Max Chirkov Advanced Text Widget versões 2.1.2 e anteriores, atualize para uma versão que contenha uma correção para este problema, uma vez que não há solução alternativa específica disponível.

**Nome do software vulnerável e versões afetadas** Multi-column Tag Map, versões n/a a 17.0.26 **Descrição** O problema está relacionado a uma vulnerabilidade de falta de autorização no Multi-column Tag Map. **Recomendações** Para as versões n/a a 17.0.26, atualize para uma versão posterior à 17.0.26 para resolver o problema. No momento, não há informações sobre medidas de mitigação adicionais para esta vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Richteam Slider Carousel – Responsive Image Slider, versões 1.5.1 e anteriores **Descrição** O problema está relacionado a uma vulnerabilidade de falta de autorização no Richteam Slider Carousel – Responsive Image Slider. **Recomendações** Para as versões 1.5.1 e anteriores, atualize para uma versão posterior à 1.5.1 para resolver o problema. No momento, não há informações sobre outras medidas de mitigação para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** WpStream plugin versions prior to 4.4.10 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For versions prior to 4.4.10, update to version 4.4.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Passionate Brains Add Expires Headers & Optimized Minify plugin versions <= 2.7 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For versions <= 2.7, update to a version that contains a fix for this issue, if available. If no specific fix is provided for version 2.7 or earlier, consider disabling the plugin until a patched version is released. As a temporary workaround, consider implementing additional CSRF protection measures, such as token-based validation, to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** AccessPress Themes Social Auto Poster plugin versions <= 2.1.4 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application. **Recommendations** For AccessPress Themes Social Auto Poster plugin versions <= 2.1.4, update to a version higher than 2.1.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WPGrim Dynamic XML Sitemaps Generator for Google plugin versions prior to 1.3.3 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Amit Agarwal Google XML Sitemap for Images plugin versions <= 2.1.3 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For Amit Agarwal Google XML Sitemap for Images plugin versions <= 2.1.3, update to a version higher than 2.1.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Tribulant Slideshow Gallery LITE plugin versions prior to 1.7.7 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application that a user is authenticated to. **Recommendations** For versions prior to 1.7.7, update to version 1.7.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress versions prior to 8.0.11 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For versions prior to 8.0.11, update to version 8.0.11 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** gl SPICE New Adman plugin versions <= 1.6.8 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For gl SPICE New Adman plugin versions <= 1.6.8, update to a version higher than 1.6.8 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Vsourz Digital CF7 Invisible reCAPTCHA plugin versions prior to 1.3.4 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** audrasjb Reusable Blocks Extended plugin versions 0.9 and earlier **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For audrasjb Reusable Blocks Extended plugin versions 0.9 and earlier, update to a version later than 0.9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** AccessPress Themes WP TFeed plugin versions <= 1.6.9 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For AccessPress Themes WP TFeed plugin versions <= 1.6.9, update to a version higher than 1.6.9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WPGrim Classic Editor and Classic Widgets plugin versions 1.2.5 and earlier **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For versions 1.2.5 and earlier, update to a version later than 1.2.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Louis Reingold Elegant Custom Fonts plugin versions 1.0 and earlier **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For Louis Reingold Elegant Custom Fonts plugin versions 1.0 and earlier, update to a version later than 1.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Meril Inc. Blog Floating Button plugin versions <= 1.4.12 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to. **Recommendations** For Meril Inc. Blog Floating Button plugin versions <= 1.4.12, update to a version higher than 1.4.12 to resolve the issue.