Whale120

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is only exploitable when the Email Confirmation feature is enabled in Profile Builder.

**Name of the Vulnerable Software and Affected Versions** Download Monitor versions prior to 5.2.11 **Description** Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting (XSS) via a Cross-Origin postMessage targeting the Admin Editor. An attacker can trick an authenticated Administrator into visiting a malicious page that targets an open Download edit screen. The payload is then persisted through the Administrator's `unfiltered html` capability and subsequently executed on the frontend via the unescaped `post content` render path of the `[download data]` shortcode. **Recommendations** Update Download Monitor to version 5.2.11 or later.

**Name of the Vulnerable Software and Affected Versions** The AI Engine – The Chatbot, AI Framework & MCP for WordPress versions prior to 3.8.1 **Description** Stored Cross-Site Scripting occurs due to a chain of missing input neutralization and output escaping. An unauthenticated caller can bypass the server-parameter denylist in the `/mwai-ui/v1/chats/submit` REST endpoint by using `model `, which is later canonicalized to `model` by the `convert keys()` function. This allows an attacker to inject a controlled string into the `$query->model` variable. The `final checks()` function then throws an exception containing this string, which is written unmodified to the PHP error log. The plugin's PHP error-log parser, `MeowKit MWAI Helpers::php error logs`, retrieves this forged log line, and the `Meow MWAI Modules Advisor::run advisor()` function appends it to the AI prompt, leading to indirect prompt injection. The resulting JSON is stored in the `mwai advisor data` option without sanitization. Finally, the `advisor metabox()` function renders the `title` and `description` values directly into the WordPress dashboard widget without proper escaping, allowing arbitrary web scripts to execute when an administrator accesses the dashboard. **Recommendations** Update The AI Engine – The Chatbot, AI Framework & MCP for WordPress to version 3.8.1 or later.