Abi Wiranata

The Post Duplicator plugin for WordPress allows unauthorized modification of data because the `duplicate post()` function fails to verify if a user possesses the `edit others posts` capability. This flaw occurs when the function processes the `selectedAuthorId` parameter via the `duplicate-post` REST endpoint. Consequently, authenticated users with Contributor-level access or higher can create duplicated posts attributed to any user, including administrators.

The plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with contributor-level access or higher to execute privileged state-changing cloud API operations. Specifically, attackers can revoke Google Search Console and Google Analytics integrations using the endpoints "api/gsc/revoke" and "api/ga/revoke". These operations are intended to be restricted to administrator-level users possessing the `sq manage settings` capability.

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress contains a generic SQL Injection flaw. This issue occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. Authenticated attackers with access to the donation management admin area and the `edit others donations` capability can append additional SQL queries via the `s` parameter to extract sensitive information from the database.

Name of the Vulnerable Software and Affected Versions The Royal WordPress Backup & Restore Plugin versions up to and including 1.0.16 Description The Royal WordPress Backup & Restore Plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the `wpr pending template` parameter due to inadequate input validation. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which can be executed if an administrator is tricked into performing an action, such as clicking a link. Recommendations Update The Royal WordPress Backup & Restore Plugin to a version later than 1.0.16.