She11F

The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions up to, and including, 4.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

**Name of the Vulnerable Software and Affected Versions** WOLF WordPress plugin versions prior to 1.1.0 **Description** The plugin fails to perform a nonce (a unique token used to prevent replay attacks) or capability check on an AJAX action. This allows an unauthenticated attacker to execute a cross-site request that tricks a logged-in administrator into writing arbitrary content, such as malicious scripts, into a post, leading to stored Cross-Site Scripting (XSS). **Recommendations** Update the WOLF WordPress plugin to version 1.1.0 or later.

**Name of the Vulnerable Software and Affected Versions** Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin versions prior to 2.4.13 **Description** Stored Cross-Site Scripting occurs because the plugin fails to sanitize a form field's caption before it is displayed as a column header on the administrator form-entries screen. This allows users with Contributor-level access or higher to store JavaScript that executes within an administrator's session. Additionally, a missing capability check in the post-duplication action allows a Contributor to publish the malicious form, ensuring an administrator renders the script. **Recommendations** Update Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin to version 2.4.13 or later.

**Name of the Vulnerable Software and Affected Versions** Business Directory versions prior to 6.4.23 **Description** Cross Site Scripting (XSS) exists in the Subscriber role, allowing an attacker to execute malicious scripts in the browser of other users. **Recommendations** Update to a version newer than 6.4.22.

**Name of the Vulnerable Software and Affected Versions** Visual Link Preview versions 2.3.1 and earlier **Description** Subscriber sensitive data exposure occurs in the software, potentially allowing unauthorized access to private information. **Recommendations** Disable or isolate the software immediately. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WooCommerce PDF Invoice Builder versions prior to 2.0.9 **Description** Improper Control of Generation of Code allows Remote Code Inclusion, enabling an unauthenticated attacker to perform full code injection via remote file inclusion. **Recommendations** Update to a version newer than 2.0.8.

**Name of the Vulnerable Software and Affected Versions** WP Ticket versions prior to 6.0.5 **Description** The WP Ticket plugin for WordPress allows unauthenticated attackers to extract sensitive information from the database. The issue occurs during unauthenticated front-end searches when the plugin hooks the `posts request` filter using the `wp ticket com posts request()` function, which subsequently calls `emd author search results()`. This function processes the `s` query parameter from `$query->query vars['s']` without using `$wpdb->prepare()` or proper escaping, concatenating the raw value into a SQL `LIKE` clause within a UNION sub-SELECT. This lack of sanitization enables the injection of additional SQL queries into existing database requests. **Recommendations** Update to a version later than 6.0.4.

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through <= 4.4.5.

**Name of the Vulnerable Software and Affected Versions** ZAYTECH Smart Online Order for Clover versions prior to or equal to 1.6.0 **Description** An issue involving the insertion of sensitive information into sent data allows for the retrieval of embedded sensitive data. **Recommendations** Update ZAYTECH Smart Online Order for Clover to a version later than 1.6.0.

**Name of the Vulnerable Software and Affected Versions** ZAYTECH Smart Online Order for Clover versions prior to 1.6.0 **Description** An authentication bypass exists in ZAYTECH Smart Online Order for Clover, allowing an attacker to bypass authentication mechanisms by using an alternate path or channel. **Recommendations** Update to a version later than 1.6.0.

**Name of the Vulnerable Software and Affected Versions** ZAYTECH Smart Online Order for Clover versions prior to 1.6.1 **Description** Improper neutralization of input during web page generation allows for Stored Cross-site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and then served to other users. **Recommendations** Update to a version later than 1.6.0.

**Name of the Vulnerable Software and Affected Versions** Geo Mashup versions prior to 1.13.20 **Description** Geo Mashup is subject to Reflected Cross-site Scripting (XSS), which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an attacker to execute malicious scripts in the victim's browser. **Recommendations** Update to a version later than 1.13.19.