Viktor Markopoulos

**Name of the Vulnerable Software and Affected Versions** The SP Project & Document Manager WordPress plugin versions prior to 4.58 **Description** The issue allows bad actors to access other users' sensitive files due to an easily guessable path used to store user files. **Recommendations** For versions prior to 4.58, update to version 4.58 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files until the update is applied.

**Name of the Vulnerable Software and Affected Versions** The SP Project & Document Manager WordPress plugin versions prior to 4.22 **Description** The issue allows users to upload files, but the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. However, it was discovered that php files could still be uploaded by changing the file extension's case, for example, from "php" to "pHP". **Recommendations** For versions prior to 4.22, update to version 4.22 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent potential exploitation until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Weekly Schedule WordPress plugin versions prior to 3.4.3 **Description** The issue concerns the "Schedule Name" input in the general options of the plugin, which did not properly sanitize input. This allowed a user to inject javascript code using the <script> HTML tags, causing a stored XSS issue. **Recommendations** For versions prior to 3.4.3, update to version 3.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Schedule Name" input field to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** AcyMailing (affected versions not specified) **Description** The issue arises when subscribing using AcyMailing, where the `redirect` parameter is not properly sanitized. An attacker can exploit this by turning a POST request into a GET request, allowing them to craft a link with a potentially malicious landing page that can be sent to a victim. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.