Spacecroupier

**Name of the Vulnerable Software and Affected Versions** wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate versions through 2.2.3 **Description** The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels. **Recommendations** For versions through 2.2.3, update to a version later than 2.2.3 to resolve the issue. At the moment, there is no information about additional mitigation measures.

**Name of the Vulnerable Software and Affected Versions** Tilda Publishing versions 0.3.23 and earlier **Description** The issue is related to a Missing Authorization vulnerability. **Recommendations** For versions 0.3.23 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dropshipping & Affiliation with Amazon versions n/a through 2.1.2 **Description** The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon. This allows for the upload of files with potentially dangerous types, which could lead to security issues. **Recommendations** For versions n/a through 2.1.2, consider restricting file uploads to only allow safe file types until a patch is available. As a temporary workaround, consider disabling file upload functionality in Dropshipping & Affiliation with Amazon until a fix is released.