Hoangnd123123

**Name of the Vulnerable Software and Affected Versions** Everest Forms plugin for WordPress versions up to, and including, 2.0.7 **Description** The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application. This can be used to query and modify information from internal services via the `font url` parameter. **Recommendations** For versions up to, and including, 2.0.7, consider restricting access to the `font url` parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the `font url` parameter in the affected plugin until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LearnPress plugin for WordPress versions up to, and including, 4.2.5.7 **Description** The issue is related to time-based SQL Injection via the `order by` parameter due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This allows unauthenticated attackers to append additional SQL queries into already existing queries, which can be used to extract sensitive information from the database. **Recommendations** For versions up to, and including, 4.2.5.7, update to a version later than 4.2.5.7 to resolve the issue. As a temporary workaround, consider restricting access to the `order by` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** LearnPress plugin for WordPress versions up to, and including, 4.2.5.7 **Description** The issue is related to the LearnPress plugin for WordPress, which is vulnerable to command injection in all versions up to, and including, 4.2.5.7. This vulnerability is due to the plugin's use of the `call user func` function with user input through the `get content` function. As a result, unauthenticated attackers can execute any public function with one parameter, potentially leading to remote code execution. **Recommendations** For versions up to, and including, 4.2.5.7, update to a version later than 4.2.5.7 to resolve the issue. As a temporary workaround, consider disabling the `get content` function until a patch is available. Restrict access to the `call user func` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress versions up to, and including, 18.5.9 **Description** The issue is related to Local File Inclusion, which allows an unauthenticated attacker to include and execute PHP files on the server via the `render action template` parameter. This enables the execution of any PHP code in those files. The vulnerability is associated with incorrect external control of the file name or path. It is estimated that over 50,000 sites are affected. **Recommendations** For versions up to, and including, 18.5.9, update to a version that fixes this issue. As a temporary workaround, consider disabling the `render action template` parameter until a patch is available. Restrict access to the `setTemplate()`, `renderPhp()`, and `path join()` functions to minimize the risk of exploitation. Avoid using the `render action template` parameter in the affected plugin until the issue is resolved.