Amin Beheshti

**Name of the Vulnerable Software and Affected Versions** Birth Chart Compatibility plugin for WordPress versions prior to 2.1 **Description** The Birth Chart Compatibility plugin for WordPress is susceptible to full path disclosure due to insufficient protection against direct access to the plugin's `index.php` file. This allows unauthenticated attackers to retrieve the full path of the web application, potentially aiding in further attacks. The information disclosed is not directly damaging but can be used in conjunction with other vulnerabilities. **Recommendations** Update the Birth Chart Compatibility plugin to version 2.1 or later.

Name of the Vulnerable Software and Affected Versions: The Guest Support – Complete customer support ticket system for WordPress plugin versions prior to 1.2.3 Description: The issue is related to a missing capability check on the `deleteMassTickets` function, allowing unauthenticated attackers to delete arbitrary support tickets, resulting in unauthorized loss of data. Recommendations: For versions up to and including 1.2.2, as a temporary workaround, consider disabling the `deleteMassTickets` function until a patch is available. Update to a version later than 1.2.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress versions up to, and including, 19.9.0 **Description** The issue is related to a misconfigured capability check on several functions, allowing authenticated attackers with Contributor-level access and above to modify data unauthorized. This includes the ability to change the email address for the account connection and disconnect the plugin. Previously created content remains displayed and functional even if the account is disconnected. **Recommendations** For versions up to, and including, 19.9.0, update to a version higher than 19.9.0 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functions to prevent unauthorized modifications until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WS Form LITE – Drag & Drop Contact Form Builder for WordPress versions prior to 1.10.36 **Description** The issue allows unauthorized access to data due to a missing capability check on the `get config` function. This makes it possible for unauthenticated attackers to read the value of the plugin's settings, including API keys for integrated services. **Recommendations** For WS Form LITE – Drag & Drop Contact Form Builder for WordPress versions prior to 1.10.36, update to version 1.10.36 or later to resolve the issue. As a temporary workaround, consider restricting access to the `get config` function until a patch is available.