Averon Averenkov

**Name of the Vulnerable Software and Affected Versions** Nelio Content versions prior to 4.3.5 **Description** The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress contains a broken access control issue. A missing capability check in a function allows authenticated attackers with contributor-level access or higher to perform unauthorized actions. **Recommendations** Update to a version newer than 4.3.4.

**Name of the Vulnerable Software and Affected Versions** Booking and Rental Manager versions prior to 2.7.2 **Description** The Booking and Rental Manager plugin for WordPress contains a broken access control issue. This is caused by a missing capability check within a function, allowing unauthenticated attackers to perform unauthorized actions. **Recommendations** Update to a version newer than 2.7.1.