Abrahack

The Rank Math SEO plugin for WordPress allows unauthorized access because the `update site editor homepage()` function lacks a capability check. This allows unauthenticated attackers to modify various plugin settings, such as the homepage title, meta description, breadcrumbs label, and social media metadata. Such modifications can negatively impact SEO rankings and enable the display of malicious content on all site pages where breadcrumbs are implemented.

The ReviewX plugin for WordPress is susceptible to unauthorized data access because of insufficient authorization checks within the `userAccessibility()` function. This allows unauthenticated attackers to access protected REST API endpoints and potentially extract or modify user and plugin configuration information.

The ReviewX plugin for WordPress is susceptible to exposure of sensitive information. Unauthenticated attackers can potentially extract sensitive data, including user names, emails, phone numbers, and addresses, through the `syncedData` function.

The ReviewX plugin for WordPress is susceptible to sensitive information exposure. This allows unauthenticated attackers to obtain authentication tokens and bypass admin restrictions. Successful exploitation grants access to sensitive data, including order details, names, emails, addresses, phone numbers, and user information, potentially enabling data export. The issue resides within the `allReminderSettings` function.

The ReviewX plugin for WordPress is susceptible to arbitrary method calls due to inadequate input validation within the `bulkTenReviews` function. This allows attackers to pass user-controlled data to a variable function call, potentially enabling the execution of arbitrary PHP class methods that require no inputs or have default values. Successful exploitation could lead to information disclosure or remote code execution, contingent upon the server configuration and available methods.

The UiPress lite plugin for WordPress allows authenticated attackers with Subscriber-level access or higher to save templates containing custom JavaScript due to a missing capability check on the `uip save ui template` function. This can lead to unauthorized modification of data.

The UiPress lite plugin for WordPress is susceptible to exposure of sensitive information. This is a result of absent capability checks within the `uip process block query` function, which is accessible via AJAX. Attackers with subscriber-level access or higher can potentially retrieve sensitive user data, including password hashes and email addresses, which could lead to account takeover.

The issue arises from the software's failure to properly validate a value before executing the do shortcode action, allowing unauthenticated attackers to execute arbitrary shortcodes. This enables potential exploitation due to the lack of validation.

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure due to missing capability checks on the `admin init()` function. This allows unauthenticated attackers to view the plugin's settings.

The issue is related to unauthorized access due to a missing capability check on the `response()` function. This allows authenticated attackers with Subscriber-level access and above to update the plugin's settings.

The issue allows authenticated attackers with Subscriber-level access and above to modify the plugin's settings due to a missing capability check on the `response()` function.

The issue is related to Reflected Cross-Site Scripting via the `content` parameter due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

The issue is related to unauthorized modification of data due to a missing capability check on the `ays save google credentials` function. This allows unauthenticated attackers to modify the Google Sheets integration credentials within the plugin's settings. Additionally, because the `client id` parameter is not sanitized or escaped when used in output, this could also be leveraged to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The issue is due to the software allowing users to execute an action that does not properly validate a value before running `do shortcode`. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

The issue is related to time-based SQL Injection via the `orderby` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The issue is related to arbitrary shortcode execution via the `gamipress do shortcode()` function. This is due to the software allowing users to execute an action that does not properly validate a value before running `do shortcode()`. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

The WordPress File Upload plugin is vulnerable to Path Traversal, allowing unauthenticated attackers to read files outside of the originally intended directory through `wfu file downloader.php`. This issue affects all versions up to, and including, 4.24.13.

The WordPress File Upload plugin is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion due to the lack of proper sanitization of the `source` parameter and allowing a user-defined directory path in the 'wfu file downloader.php' file. This makes it possible for unauthenticated attackers to execute code on the server. Over 2 million results are found on ZoomEye, indicating a large number of potentially affected devices worldwide.

The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the `wfu ABSPATH` cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server.

The issue concerns Sensitive Information Exposure, allowing unauthenticated attackers to extract potentially sensitive paid course material through the `class-lp-rest-material-controller.php` file. This makes it possible for attackers to access confidential information without proper authentication.