Gregory Stewart

**Name of the Vulnerable Software and Affected Versions** The Motors – Car Dealer, Classifieds & Listing plugin for WordPress versions 1.4.43 and earlier **Description** The issue allows authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes due to the software permitting users to execute an action without properly validating a value before running `do shortcode`. This enables the execution of arbitrary shortcodes. **Recommendations** For versions 1.4.43 and earlier, update to a version later than 1.4.43 to resolve the issue. As a temporary workaround, consider restricting access to the `do shortcode` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** LA-Studio Element Kit for Elementor plugin for WordPress versions up to, and including, 1.4.2 **Description** The issue allows authenticated attackers with Contributor-level access and above to include and execute arbitrary files on the server via the ` load template` function. This enables the execution of any PHP code in those files, which can be used to bypass access controls, obtain sensitive data, or achieve code execution, especially in cases where images and other “safe” file types can be uploaded and included. **Recommendations** For versions up to, and including, 1.4.2, consider disabling the ` load template` function as a temporary workaround until a patch is available. Restrict access to sensitive files and directories to minimize the risk of exploitation. Avoid uploading executable files or any files that could be used to execute malicious code. Update to a version that fixes this issue once it becomes available.

**Name of the Vulnerable Software and Affected Versions** Add Widget After Content plugin for WordPress versions up to, and including, 2.4.6 **Description** The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For versions up to, and including, 2.4.6, update to a version later than 2.4.6 to resolve the issue. As a temporary workaround, consider restricting access to admin settings to minimize the risk of exploitation. Additionally, ensure that unfiltered html is enabled, if possible, to mitigate the risk in affected installations.