Fariq Fadillah

**Name of the Vulnerable Software and Affected Versions** WoWonder (affected versions not specified) **Description** A critical vulnerability was found in WoWonder, affecting the file /requests.php, which handles group messages. The manipulation of the `group id` argument allows posting messages in other groups. This attack can be launched remotely and may require authentication. A video explaining the attack has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WoWonder The Ultimate PHP Social Network Platform version 4.0.0 **Description** The issue allows unauthenticated attackers to arbitrarily change group ID names due to an access control problem. **Recommendations** For WoWonder The Ultimate PHP Social Network Platform version 4.0.0, consider restricting access to group ID name modification functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.