Sakri Rafael Koskimies

**Name of the Vulnerable Software and Affected Versions** Complianz WordPress plugin versions prior to 6.3.4 Complianz Premium WordPress plugin versions prior to 6.3.6 **Description** The issue allows translators to inject arbitrary SQL through an unsanitized translation. This can be done through an infected translation file or by a user with a translator role using translation plugins such as Loco Translate or WPML. **Recommendations** For Complianz WordPress plugin versions prior to 6.3.4, update to version 6.3.4 or later. For Complianz Premium WordPress plugin versions prior to 6.3.6, update to version 6.3.6 or later. As a temporary workaround, consider restricting the translator role and limiting access to translation plugins until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Blog2Social: Social Media Auto Post & Scheduler WordPress plugin versions prior to 6.9.10 **Description** The issue is related to a SQL injection that occurs due to improper sanitization and escaping of a parameter used in a SQL statement. This can be exploited by any authenticated users, including subscribers. **Recommendations** For versions prior to 6.9.10, update to version 6.9.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Blog2Social: Social Media Auto Post & Scheduler WordPress plugin versions prior to 6.9.10 **Description** The issue allows any authenticated users, such as subscribers, to perform SSRF (Server-Side Request Forgery) attacks due to the lack of authorisation in an AJAX action and the failure to ensure that the requested URL is external. **Recommendations** For Blog2Social: Social Media Auto Post & Scheduler WordPress plugin versions prior to 6.9.10, update to version 6.9.10 or later to resolve the issue.