Juan Pablo Gomez Postigo

**Name of the Vulnerable Software and Affected Versions** Ricoh Web Image Monitor (affected versions not specified) **Description** A reflected cross-site scripting issue exists in laser printers and multifunction printers (MFPs) that implement Ricoh Web Image Monitor. This could allow an arbitrary script to be executed on the web browser of the user who accessed Web Image Monitor. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hide My WP Ghost WordPress plugin versions prior to 5.2.02 **Description** The issue allows an unauthenticated visitor to access the hidden login page due to the plugin not preventing redirects to the login page via the `auth redirect` WordPress function. **Recommendations** For versions prior to 5.2.02, update to version 5.2.02 or later to resolve the issue. As a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: WPS Hide Login WordPress plugin versions prior to 1.9.16.4 Description: The issue allows an unauthenticated visitor to access the hidden login page due to the plugin not preventing redirects to the login page via the `auth redirect` WordPress function. Recommendations: For versions prior to 1.9.16.4, update to version 1.9.16.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Defender Security WordPress plugin versions prior to 4.1.0 **Description** The issue allows an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled, due to the plugin not preventing redirects to the login page via the `auth redirect` WordPress function. **Recommendations** For versions prior to 4.1.0, update to version 4.1.0 or later to resolve the issue. As a temporary workaround, consider disabling the hide login page functionality until a patch is available. Restrict access to the login page to minimize the risk of exploitation.