Maysbachs

**Name of the Vulnerable Software and Affected Versions** Jenkins versions 2.554 and earlier Jenkins LTS versions 2.541.2 and earlier **Description** The software does not safely handle symbolic links when extracting .tar and .tar.gz archives. This allows crafted archives to write files to arbitrary locations on the filesystem, limited by the file system access permissions of the user running Jenkins. An attacker with Item/Configure permission, or control over agent processes, can exploit this to deploy malicious scripts or plugins on the controller. **Recommendations** Update Jenkins to a version later than 2.554. Update Jenkins LTS to a version later than 2.541.2.

**Name of the Vulnerable Software and Affected Versions** Jenkins LoadNinja Plugin versions 2.1 and earlier **Description** The Jenkins LoadNinja Plugin does not properly mask LoadNinja API keys as they are displayed on the job configuration form. This could allow attackers to observe and capture these keys. **Recommendations** Update to a newer version of the Jenkins LoadNinja Plugin that addresses this issue.

**Name of the Vulnerable Software and Affected Versions** UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress versions through 1.2.44 **Description** The UsersWP plugin for WordPress is susceptible to a time-based SQL Injection issue due to insufficient escaping of user-supplied parameters and inadequate preparation of existing SQL queries. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive information from the database via the `upload file remove` function and the `htmlvar` parameter. **Recommendations** Update to version 1.2.45.

**Name of the Vulnerable Software and Affected Versions** WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 **Description** The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contains a Stored Cross-Site Scripting issue due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts into pages, which will execute when a user accesses the injected page. This only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** Update WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce to a version later than 3.1.49.

**Name of the Vulnerable Software and Affected Versions** WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50 **Description** The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the `organizer name` parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute when a user accesses an injected page. **Recommendations** Update WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce to version 3.1.50 or later.

**Name of the Vulnerable Software and Affected Versions** The Ultimate Blocks – WordPress Blocks Plugin versions up to, and including, 3.3.3 **Description** The issue is related to Stored Cross-Site Scripting via multiple widgets due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 3.3.3, update to a version that addresses the insufficient input sanitization and output escaping issue to prevent Stored Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the plugin's widgets for users with Contributor-level access and above until a patch is available.