Utkarsh Agrawal

**Name of the Vulnerable Software and Affected Versions** Orders Tracking for WooCommerce WordPress plugin version 1.2.5 and earlier **Description** The issue allows high privilege users with the manage woocommerce capability to access any file on the web server via a Traversal attack when importing a CSV file, due to the lack of validation of the `file url` parameter. The content retrieved is limited to the first line of the file. **Recommendations** For versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the CSV import feature to minimize the risk of exploitation. Avoid using the `file url` parameter in the affected import functionality until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** WP Event Manager versions prior to 3.1.28 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the search function in the WP Event Manager plugin does not properly sanitise and escape its output, which is then reflected back in an attribute on the event dashboard. This can lead to malicious scripts being executed. **Recommendations** For versions prior to 3.1.28, update to version 3.1.28 or later to resolve the issue. As a temporary workaround, consider restricting access to the event dashboard to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Themify WordPress plugin versions prior to 1.3.8 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the `page` parameter is not properly sanitised and escaped before being outputted back in an attribute on an admin page. **Recommendations** For versions prior to 1.3.8, update to version 1.3.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MailerLite WordPress plugin versions prior to 1.5.4 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. **Recommendations** For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WP 2FA WordPress plugin versions prior to 2.2.1 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in an admin page. **Recommendations** For WP 2FA WordPress plugin versions prior to 2.2.1, update to version 2.2.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WPC Smart Wishlist for WooCommerce WordPress plugin versions prior to 2.9.9 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in an attribute via an AJAX action. **Recommendations** For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue.