Dangnosuy

**Name of the Vulnerable Software and Affected Versions** WooMS versions prior to 9.15 **Description** Insufficient validation of user-supplied URLs in the data-sync feature allows unauthenticated attackers to perform Server-Side Request Forgery (SSRF), a technique where the server is coerced into making requests to an unintended location. During these requests, the plugin attaches stored third-party integration credentials, leading to the disclosure of sensitive configuration information. **Recommendations** Update WooMS to version 9.15 or later. As a temporary mitigation, disable the data-sync feature to prevent the exploitation of the SSRF issue.

**Name of the Vulnerable Software and Affected Versions** Integrate PhonePe with WooCommerce WordPress plugin versions prior to 1.2.2 **Description** The plugin fails to validate whether a verified payment transaction is associated with the specific order being marked as paid. Additionally, it does not verify the authenticity of payment-completion requests. This allows unauthenticated attackers to reuse a single valid transaction to mark arbitrary orders as paid, effectively bypassing the payment process. **Recommendations** Update the plugin to version 1.2.2 or later.

**Name of the Vulnerable Software and Affected Versions** DataPress (Dataverse Integration) WordPress plugin versions prior to 2.91 **Description** Insufficient access restrictions in the template rendering feature allow users with Contributor roles to disclose sensitive information. This issue occurs because the feature exposes the data of the viewing user, which can be leveraged to obtain session cookies of higher privileged users who interact with the affected content. **Recommendations** Update the plugin to version 2.91 or later.

**Name of the Vulnerable Software and Affected Versions** User Submitted Posts versions prior to 20260608 **Description** Stored Cross-Site Scripting occurs when the plugin fails to escape a submitted value before outputting it in an admin-configured display template. This issue can be triggered by unauthenticated users provided that a non-default display option is enabled. **Recommendations** Update User Submitted Posts to version 20260608 or later.

**Name of the Vulnerable Software and Affected Versions** SQL Chart Builder WordPress plugin versions prior to 2.3.8 **Description** Improper escaping of user input concatenated to SQL queries allows attackers to perform SQL Injection attacks against the dynamic filter functionality. **Recommendations** Update the plugin to version 2.3.8 or later.