Keyvan Hardani

**Name of the Vulnerable Software and Affected Versions** Smart Product Review plugin for WordPress versions up to, and including, 1.0.4 **Description** The Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server, which may make remote code execution possible. **Recommendations** For versions up to, and including, 1.0.4, update to a version that includes file type validation to prevent arbitrary file uploads. As a temporary workaround, consider restricting access to the plugin's upload functionality until a patch is available.

**Name of the Vulnerable Software and Affected Versions** I Am Gloria plugin for WordPress versions up to and including 1.1.4 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the `iamgloria23 gloria settings page` function. This allows unauthenticated attackers to reset the tenant ID by tricking a site administrator into performing an action, such as clicking on a link. **Recommendations** For I Am Gloria plugin for WordPress versions up to and including 1.1.4, update to a version that includes proper nonce validation to prevent Cross-Site Request Forgery attacks. As a temporary workaround, consider restricting access to the `iamgloria23 gloria settings page` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** eShop - Multipurpose Ecommerce Store Website version 3.0.4 **Description** A Cross-site scripting (XSS) issue exists in the json search parse and the json response, allowing remote attackers to inject arbitrary web script or HTML via the "get products?search" parameter. This enables attackers to execute malicious scripts on the client-side. **Recommendations** For eShop - Multipurpose Ecommerce Store Website version 3.0.4, consider restricting access to the `get products?search` parameter until a patch is available. As a temporary workaround, avoid using the `search` parameter in the affected API endpoint until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: WP Guppy WordPress plugin versions prior to 1.3 Description: The issue allows any user to call certain REST API endpoints without authorization, potentially leading to sensitive information disclosure, including usernames and chats between users. It also enables sending messages as an arbitrary user. Recommendations: For WP Guppy WordPress plugin versions prior to 1.3, update to version 1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected REST API endpoints until the update is applied.