Simone Onofri

**Name of the Vulnerable Software and Affected Versions** Web Directory Free WordPress plugin versions prior to 1.7.3 **Description** The issue is related to a Local File Inclusion problem. It occurs because the plugin does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues. Unauthenticated attackers can exploit this to access sensitive server files. **Recommendations** For versions prior to 1.7.3, update to version 1.7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive server files until the update is applied.

**Name of the Vulnerable Software and Affected Versions** The Web Directory Free WordPress plugin versions prior to 1.7.2 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This could be exploited against high-privilege users, such as administrators. **Recommendations** For versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** The Web Directory Free WordPress plugin versions prior to 1.7.0 **Description** The issue concerns a SQL injection vulnerability. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement via an AJAX action. This action is available to unauthenticated users, making it accessible without login credentials. The SQL injection can be performed using different techniques, including UNION, Time-Based, and Error-Based methods. **Recommendations** For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the AJAX action until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** Pricing Table Builder WordPress plugin versions 1.1.6 and earlier **Description** The issue is related to a SQL injection problem. It occurs because a `parameter` is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by high-privilege users, such as admins. **Recommendations** For Pricing Table Builder WordPress plugin versions 1.1.6 and earlier, update to a version that properly sanitises and escapes parameters used in SQL statements to prevent SQL injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ARC (aka ARC2) through 2011-12-01 **Description** The issue allows reflected XSS via the `end point.php` query parameter in an `output=htmltab` action. This can be exploited through the "/end point.php" API endpoint, specifically by manipulating the `output` parameter and the query parameters passed to it. **Recommendations** For ARC (aka ARC2) through 2011-12-01, consider restricting access to the `/end point.php` API endpoint, specifically when the `output` parameter is set to `htmltab`, until a patch is available. As a temporary workaround, avoid using the `end point.php` query parameter in actions where `output=htmltab` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ARC (aka ARC2) through 2011-12-01 **Description** The issue allows blind SQL Injection in the `getTriplePatternSQL` function within `ARC2 StoreSelectQueryHandler.php` via comments in a SPARQL WHERE clause. **Recommendations** For ARC (aka ARC2) through 2011-12-01, consider disabling the `getTriplePatternSQL` function in `ARC2 StoreSelectQueryHandler.php` to prevent exploitation until a fix is available. Restrict access to comments in SPARQL WHERE clauses to minimize the risk of blind SQL Injection.

**Name of the Vulnerable Software and Affected Versions** The Steveas WP Live Chat Shoutbox WordPress plugin versions 1.4.2 and earlier **Description** The issue is related to Stored Cross-Site Scripting, which occurs because a parameter is not properly sanitized and escaped before being outputted back in the Shoutbox. This could be exploited against high-privilege users, such as admins. **Recommendations** For The Steveas WP Live Chat Shoutbox WordPress plugin versions 1.4.2 and earlier, update to a version that properly sanitizes and escapes parameters to prevent Stored Cross-Site Scripting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The Steveas WP Live Chat Shoutbox WordPress plugin versions 1.4.2 and earlier **Description** The issue is related to a SQL injection vulnerability. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement via an AJAX action. This action is available to unauthenticated users, making it accessible to remote attackers. The exploitation of this issue can allow an attacker to execute arbitrary SQL code. **Recommendations** For versions 1.4.2 and earlier, update to a version that addresses this SQL injection issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.