Legion Hunter

**Name of the Vulnerable Software and Affected Versions** Fense Proxy & VPN Blocker versions prior to 3.0.2 **Description** Unauthorized modification of data is possible due to a missing capability check and missing nonce validation in the `fense bpvt save settings()` function. The callback is registered to both `wp ajax *` and `wp ajax nopriv *` hooks and unconditionally calls `delete option()` on four plugin options and `delete transient()` on three transients related to the plugin's API key cache and settings. This allows unauthenticated attackers to delete plugin options and transients, resetting the API key and data cache, which forces the plugin to refetch state. **Recommendations** Update to a version newer than 3.0.1. As a temporary mitigation, restrict access to the `fense bpvt save settings()` function.

**Name of the Vulnerable Software and Affected Versions** ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base versions prior to 2.1.8 **Description** Authenticated users with Subscriber-level access and above can perform unauthorized cache deletion. This is caused by a missing capability check on the `thrivedesk clear cache` AJAX action. **Recommendations** Update ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base to version 2.1.8 or later.

**Name of the Vulnerable Software and Affected Versions** GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference versions prior to 1.1.9 **Description** Cross-Site Request Forgery (CSRF) occurs due to missing nonce verification in the `reset credential()` function, which handles the `wp ajax goodmeet reset google meet credential` AJAX action. Although the function checks for the `manage options` capability, the lack of a nonce allows unauthenticated attackers to trick a site administrator into clicking a malicious link. This action resets and deletes the stored Google Meet API credentials `goodmeet google credentials` and OAuth tokens `goodmeet google token`, resulting in the disablement of the Google Meet integration on the site. **Recommendations** Update to a version newer than 1.1.8.

**Name of the Vulnerable Software and Affected Versions** GW AI Website Builder versions prior to 1.0.2 **Description** The plugin is susceptible to unauthorized data modification because the `gwaiwebu gravitywrite disconnect handler()` function lacks a proper capability check. Authenticated users with Subscriber-level permissions or higher can exploit this by using the 'gwaiwebu gravitywrite disconnect' AJAX action to disconnect the plugin from GravityWrite. **Recommendations** Update the plugin to version 1.0.2 or later. As a temporary mitigation, restrict access to the `gwaiwebu gravitywrite disconnect handler()` function.

**Name of the Vulnerable Software and Affected Versions** Age Verification & Identity Verification by Token of Trust versions prior to 4.0.3 **Description** The plugin is subject to unauthorized access because the `handle export table()` function is registered on the WordPress 'init' hook without a capability check. This hook executes for all requests, including those from unauthenticated users. An attacker can download a CSV file containing sensitive WooCommerce donation data—such as order dates, order IDs, charitable donation amounts, and admin-only order edit URLs—by accessing any page with the `tot export table` GET parameter set to a numeric value between 0 and 3. **Recommendations** Update the plugin to a version later than 4.0.2. As a temporary mitigation, restrict access to the `tot export table` parameter to prevent unauthorized data export.

Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13.

Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Import Export for WooCommerce: from n/a through 2.5.6.

**Name of the Vulnerable Software and Affected Versions** RepairBuddy versions prior to 4.1121 **Description** A missing authorization issue in Webful Creations RepairBuddy allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update to a version later than 4.1121.

**Name of the Vulnerable Software and Affected Versions** WP Search Analytics versions prior to 1.5.0 **Description** A missing authorization issue in the plugin allows for the exploitation of incorrectly configured access control security levels, resulting in broken access control. **Recommendations** Update to version 1.5.0 or later.

**Name of the Vulnerable Software and Affected Versions** QR Redirector versions prior to 2.0.3 **Description** Missing authorization allows the exploitation of incorrectly configured access control security levels. **Recommendations** Update QR Redirector to a version newer than 2.0.3.

**Name of the Vulnerable Software and Affected Versions** Autoship Cloud for WooCommerce Subscription Products versions prior to 2.14.1 **Description** A missing authorization issue exists in the Autoship Cloud for WooCommerce Subscription Products plugin, which allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify the identity or permissions of a user before granting access to restricted resources. **Recommendations** Update to a version later than 2.14.0.

**Name of the Vulnerable Software and Affected Versions** Feeds for YouTube versions prior to 2.6.4 **Description** A missing capability check in the `actions()` function allows users with subscriber privileges or higher to unauthorizedly modify or delete the plugin license key. **Recommendations** Update to version 2.6.4 or later. As a temporary workaround, restrict access to the `actions()` function to only authorized administrative users.

**Name of the Vulnerable Software and Affected Versions** Barcode Scanner with Inventory & Order Manager versions prior to 1.11.0 **Description** A Cross-Site Request Forgery (CSRF) flaw exists in the Barcode Scanner with Inventory & Order Manager. This issue allows an attacker to induce a user to perform actions they did not intend to do by tricking them into clicking a malicious link or visiting a compromised page. **Recommendations** Update to a version later than 1.11.0.

Name of the Vulnerable Software and Affected Versions Eniture technology LTL Freight Quotes – Worldwide Express Edition versions through 5.2.1 Description A missing authorization issue exists in Eniture technology LTL Freight Quotes – Worldwide Express Edition due to incorrectly configured access control security levels. Recommendations Update to a version later than 5.2.1

**Name of the Vulnerable Software and Affected Versions** Funlus Oy WPLifeCycle versions through 3.3.1 **Description** An authorization issue exists in Funlus Oy WPLifeCycle free-php-version-info, allowing exploitation due to incorrectly configured access control security levels. **Recommendations** Versions prior to 3.3.1 should be updated.

**Name of the Vulnerable Software and Affected Versions** Chocolate House versions through 1.1.5 **Description** A missing authorization issue exists in Chocolate House, allowing exploitation of incorrectly configured access control security levels. **Recommendations** Update Chocolate House to a version later than 1.1.5.

**Name of the Vulnerable Software and Affected Versions** Aryan Shirani Bid Abadi Site Suggest versions through 1.3.9 **Description** The software contains a missing authorization flaw in the `site-suggest` functionality. This allows access to functionality that is not properly restricted by Access Control Lists (ACLs). **Recommendations** Update to a version later than 1.3.9.

**Name of the Vulnerable Software and Affected Versions** Print Invoice & Delivery Notes for WooCommerce versions through 5.8.0 **Description** The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing authorization check. **Recommendations** Update Print Invoice & Delivery Notes for WooCommerce to a version newer than 5.8.0.

**Name of the Vulnerable Software and Affected Versions** PDF for Elementor Forms + Drag And Drop Template Builder versions through 6.3.1 **Description** A missing authorization issue exists in PDF for Elementor Forms + Drag And Drop Template Builder. The issue involves exploiting incorrectly configured access control security levels within the add-on. **Recommendations** Update PDF for Elementor Forms + Drag And Drop Template Builder to a version newer than 6.3.1.

**Name of the Vulnerable Software and Affected Versions** CryoutCreations Serious Slider versions through 1.2.7 **Description** A missing authorization issue exists in CryoutCreations Serious Slider, allowing exploitation of incorrectly configured access control security levels. **Recommendations** Update CryoutCreations Serious Slider to a version later than 1.2.7.