Sumit Patel

**Name of the Vulnerable Software and Affected Versions** Adicon Server WordPress plugin versions 1.2 and earlier **Description** The Adicon Server WordPress plugin does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. **Recommendations** For Adicon Server WordPress plugin versions 1.2 and earlier, update to a version that includes the necessary sanitization and escaping of parameters in SQL statements to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** The 404 Solution WordPress plugin versions prior to 2.35.8 **Description** The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by high privilege users, such as admins. **Recommendations** For versions prior to 2.35.8, update to version 2.35.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation by high privilege users.

**Name of the Vulnerable Software and Affected Versions** Simple Giveaways WordPress plugin versions prior to 2.45.1 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escaped, and this vulnerability can be exploited even when the unfiltered html capability is disallowed, for example in a multisite setup. **Recommendations** For versions prior to 2.45.1, update to version 2.45.1 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high privilege users to access and modify the plugin's settings until the update is applied.