David Dewes

**Name of the Vulnerable Software and Affected Versions** Post SMTP – WP SMTP Plugin versions up to and including 3.4.1 **Description** The Post SMTP – WP SMTP Plugin for WordPress is susceptible to unauthorized data modification due to a missing capability check within the `update post smtp pro option callback` function. Authenticated attackers possessing Subscriber-level access or higher can enable pro extensions. **Recommendations** Update the Post SMTP – WP SMTP Plugin to a version beyond 3.4.1.

**Name of the Vulnerable Software and Affected Versions** Frontend File Manager Plugin for WordPress versions prior to 21.5 **Description** The plugin is susceptible to unauthorized data loss due to a missing capability check within the `wpfm delete multiple files()` function. This allows unauthenticated attackers to delete arbitrary posts. **Recommendations** Update the Frontend File Manager Plugin to a version later than 21.5.

**Name of the Vulnerable Software and Affected Versions** HyperComments plugin for WordPress versions up to, and including, 1.2.2 **Description** The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the `hc request handler` function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site, which can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. **Recommendations** For HyperComments plugin for WordPress versions up to, and including, 1.2.2: Update to a version higher than 1.2.2 to fix the missing capability check on the `hc request handler` function. As a temporary workaround, consider disabling the `hc request handler` function until a patch is available. Restrict access to the WordPress site's options update functionality to minimize the risk of exploitation.