Kitch Global

**Name of the Vulnerable Software and Affected Versions** MapPress Maps for WordPress versions prior to 2.96.7 **Description** An authorization bypass exists due to missing ownership verification in REST API routes registered via the `Mappress Api::rest api init()` function. The GET '/wp-json/mapp/v1/maps/{mapid}' endpoint uses a permission callback that returns true, allowing unauthenticated attackers to read sensitive map data, such as POI titles, addresses, coordinates, and body content, by enumerating the `mapid` variable. Additionally, write endpoints (POST update, DELETE, PATCH mutate, POST clone, and POST empty trash) only verify the generic `edit posts` capability without confirming if the requester owns the targeted map. This lack of verification is also present in the model layer functions `Mappress Map::get()`, `save()`, `delete()`, `mutate()`, and `empty trash()`, which operate on any supplied map ID. Consequently, authenticated attackers with Contributor-level access or higher can modify, delete, trash, restore, or clone any map regardless of the author. **Recommendations** Update the plugin to a version later than 2.96.6.

**Name of the Vulnerable Software and Affected Versions** Slider by Soliloquy – Responsive Image Slider for WordPress versions prior to 2.8.2 **Description** An issue exists where authenticated attackers with subscriber-level access or higher can extract draft slider metadata. This includes unpublished media URLs, captions, and slider configurations created by administrators or editors. The flaw is located in the `map meta cap` function. **Recommendations** Update to a version later than 2.8.1.

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wple basic get requests' function in all versions up to, and including, 7.8.5.10. This makes it possible for authenticated attackers, with subscriber level access and above, to reset the SSL setup state, force SSL to appear complete, and modify plan selection options.