Tran Nguyen Bao Khanh

Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions.

Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.

Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.

Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.

Unauthenticated Local File Inclusion in Right Way <= 4.0 versions.

Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.

Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions.

Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.

Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.

Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.

Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions.

Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.

Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.

Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.

Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.

Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.

Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.

Unauthenticated Local File Inclusion in Solene <= 3.4 versions.

**Name of the Vulnerable Software and Affected Versions** WP eMember versions prior to 10.2.3 **Description** An issue in the software allows the retrieval of embedded sensitive system information by an unauthorized control sphere. **Recommendations** Update to a version later than 10.2.2.