Dzmitry Sviatlichny

The issue is related to Stored Cross-Site Scripting via the `expiry date` parameter due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The issue is related to the `compression level` setting in the plugin, which is used in `proc open()` without any validation. This allows authenticated attackers with administrator-level access and above to execute code on the server.

Name of the Vulnerable Software and Affected Versions: WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin versions up to, and including, 2.32 Description: The issue allows authenticated attackers with Administrator-level access and above to perform SQL Injection via the `orderby` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This enables attackers to append additional SQL queries into already existing queries, potentially extracting sensitive information from the database. Recommendations: For versions up to, and including, 2.32, consider restricting access to the `orderby` parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit Administrator-level access to trusted users only.

The issue allows authenticated attackers with Administrator-level access and above to extract sensitive data, including full database credentials, via the "dashboard/backup.php" file.

The issue arises from insufficient file path validation in the `database backup ajax delete` function, allowing authenticated attackers with Administrator-level access and above to delete arbitrary files on the server. This can lead to remote code execution when critical files, such as `wp-config.php`, are deleted.

The issue allows authenticated attackers with administrator-level access and above to read the contents of arbitrary files on the server, which can contain sensitive information, through the `database backup ajax download()` function. This enables access to confidential data.