Yuvraj Tomar

**Name of the Vulnerable Software and Affected Versions** Smart Slider 3 versions prior to 3.5.1.38 **Description** Authenticated attackers with contributor-level access and above can cause sensitive information exposure. By manipulating the `keyword` parameter, an attacker can extract titles and full content excerpts of private, draft, pending, trashed, and auto-draft posts authored by any user, including Administrators and Editors. The necessary nonce is available on the '/wp-admin/post-new.php' endpoint, which is accessible to users with the `edit posts` capability. **Recommendations** Update the plugin to a version newer than 3.5.1.37. Avoid using the `keyword` parameter in the affected plugin until the update is applied.

**Name of the Vulnerable Software and Affected Versions** ARMember – Membership Plugin versions prior to 4.0.61 **Description** The ARMember – Membership Plugin for WordPress is susceptible to time-based blind SQL Injection, a technique where an attacker asks the database true/false questions and determines the answer based on the time the server takes to respond. This occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. Unauthenticated attackers can append additional SQL queries via the `orderby` parameter to extract sensitive information from the database. **Recommendations** Update the plugin to a version later than 4.0.60. As a temporary workaround, restrict or sanitize the input for the `orderby` parameter to minimize the risk of exploitation.