Abi Wiranata

**Name of the Vulnerable Software and Affected Versions** Post Duplicator versions prior to 3.0.12 **Description** The Post Duplicator plugin for WordPress allows unauthorized modification of data because the `duplicate post()` function fails to verify if a user possesses the `edit others posts` capability. This flaw occurs when the function processes the `selectedAuthorId` parameter via the `duplicate-post` REST endpoint. Consequently, authenticated users with Contributor-level access or higher can create duplicated posts attributed to any user, including administrators. **Recommendations** Update the plugin to a version newer than 3.0.11. As a temporary mitigation, restrict access to the `duplicate-post` REST endpoint or limit user permissions to prevent Contributor-level accounts from triggering the `duplicate post()` function.

**Name of the Vulnerable Software and Affected Versions** SEO Plugin by Squirrly SEO versions prior to 12.4.17 **Description** The plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with contributor-level access or higher to execute privileged state-changing cloud API operations. Specifically, attackers can revoke Google Search Console and Google Analytics integrations using the endpoints "api/gsc/revoke" and "api/ga/revoke". These operations are intended to be restricted to administrator-level users possessing the `sq manage settings` capability. **Recommendations** Update to a version later than 12.4.16.

**Name of the Vulnerable Software and Affected Versions** Charitable – Donation Plugin for WordPress versions prior to 1.8.10.5 **Description** The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress contains a generic SQL Injection flaw. This issue occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. Authenticated attackers with access to the donation management admin area and the `edit others donations` capability can append additional SQL queries via the `s` parameter to extract sensitive information from the database. **Recommendations** Update to a version later than 1.8.10.4. As a temporary workaround, restrict access to the donation management admin area to only highly trusted users to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions The Royal WordPress Backup & Restore Plugin versions up to and including 1.0.16 Description The Royal WordPress Backup & Restore Plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the `wpr pending template` parameter due to inadequate input validation. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which can be executed if an administrator is tricked into performing an action, such as clicking a link. Recommendations Update The Royal WordPress Backup & Restore Plugin to a version later than 1.0.16.