Ayukiab

**Name of the Vulnerable Software and Affected Versions** Groundhogg versions prior to 4.8.3 **Description** Groundhogg contains an issue involving improper neutralization of special elements used in an SQL command, which allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or false questions and determines the answer based on the application's response. **Recommendations** Update to version 4.8.3 or later.

**Name of the Vulnerable Software and Affected Versions** Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions prior to 2.0.23 **Description** An Unsafe Reflection issue exists where the software uses externally-controlled input to select classes or code, leading to Parameter Injection. This occurs when the application allows user-supplied data to influence the reflection process, which is a mechanism used to inspect or modify the runtime behavior of applications. **Recommendations** Update Unlimited Elements For Elementor (Free Widgets, Addons, Templates) to version 2.0.23 or later.

**Name of the Vulnerable Software and Affected Versions** Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions prior to 2.0.21 **Description** Improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or false questions and determines the answer based on the application's response. **Recommendations** Update Unlimited Elements For Elementor (Free Widgets, Addons, Templates) to version 2.0.21 or later.

Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.