Chamseddine Bouzaiene

**Name of the Vulnerable Software and Affected Versions** SOGO Add Script to Individual Pages Header Footer versions prior to 4.0 **Description** The plugin fails to sanitize or escape custom header and footer script values saved via the post metabox. Additionally, it does not restrict these actions to users with the `unfiltered html` capability. This allows users with contributor-level access or higher to perform a Stored Cross-Site Scripting (XSS) attack—a technique where malicious scripts are permanently stored on the target server—which then executes in the browser of administrators reviewing the post or any visitor once the post is published. **Recommendations** Update SOGO Add Script to Individual Pages Header Footer to version 4.0 or later.

**Name of the Vulnerable Software and Affected Versions** Login & Register Forms versions prior to 3.2.5 **Description** When the verification-code reset mode is enabled, the plugin fails to properly enforce rate limits during the password-reset verification-code flow. The verification code and the per-source attempt counter are keyed on a value controlled by the client, which allows an unauthenticated attacker to reset the attempt limit and brute-force the code to take over any account, including those with administrator privileges. **Recommendations** Update to version 3.2.5 or later.

**Name of the Vulnerable Software and Affected Versions** Frontend File Manager Plugin versions prior to 23.7 **Description** Insufficient validation of file paths derived from user input allows unauthenticated users to delete arbitrary files on the server when guest upload mode is enabled. This issue can be exploited to delete critical files such as `wp-config.php`, which forces the site into its setup routine and can lead to a full site takeover. **Recommendations** Update Frontend File Manager Plugin to version 23.7 or later. Disable guest upload mode as a temporary mitigation measure to prevent unauthenticated file deletion.