Elymaro

**Name of the Vulnerable Software and Affected Versions** UpSignOn for Windows versions prior to 7.19.0 **Description** A sensitive data exposure issue exists where local attackers can recover the master password and decrypt vault contents. This is possible by reading a retained backup key from the process memory of `UpSignOn.exe`, which remains accessible even after the vault has been re-locked. Attackers can use this backup key to decrypt the encrypted master password backup stored in `v6-vault1.DATA.txt`, subsequently using the recovered master password to decrypt the main vault and export all password manager entries in cleartext. **Recommendations** Update to version 7.19.0 or later.

**Name of the Vulnerable Software and Affected Versions** SEOWriting plugin for WordPress versions prior to 1.12.6 **Description** An issue exists where authenticated contributors can inject malicious JavaScript into post content. This is possible due to an overly permissive KSES allowlist—a security filter used by WordPress to sanitize HTML—that explicitly permits the `onload` event handler on `iframe` elements. When a higher-privileged user views or previews the affected post, the stored JavaScript payload executes, which may result in account compromise or privilege escalation. **Recommendations** Update the SEOWriting plugin for WordPress to version 1.12.6 or later.

**Name of the Vulnerable Software and Affected Versions** UpSignOn for Windows versions prior to 7.19.0 **Description** Insecure credential storage allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering an authentication prompt. A standard local process within the same Windows session can access this biometric key to decrypt protected vault files and export the entire password manager contents in cleartext. **Recommendations** Update UpSignOn for Windows to version 7.19.0 or later.

**Name of the Vulnerable Software and Affected Versions** UpSignOn for Windows versions prior to 7.19.0 **Description** A sensitive data exposure issue exists that allows local attackers to recover cleartext vault data from process memory, even when the application is locked. By utilizing the `PROCESS VM READ` permission, an attacker can read the memory space of the `UpSignOn.exe` process to extract sensitive information, including entry names, URLs, usernames, passwords, TOTP secrets, and notes. **Recommendations** Update UpSignOn for Windows to version 7.19.0 or later.

**Name of the Vulnerable Software and Affected Versions** Keep Backup Daily versions prior to 2.1.4 **Description** An issue allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed `kbd cron process` parameter. Attackers can download the generated backup from the publicly accessible uploads directory by predicting the filename, which is based on the database name, a limited random range, and the current Unix timestamp. **Recommendations** Update to version 2.1.4 or later.

WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting the injection point, an attacker can inject additional PostgreSQL statements, bypass the host scope restrictions applied to the account, and read information from other rows or tables within the database.

**Name of the Vulnerable Software and Affected Versions** nicen-localize-image versions prior to 1.5.0 **Description** A SQL Injection issue exists that allows users with Contributor privileges to execute arbitrary SQL commands on the database. **Recommendations** Update nicen-localize-image to version 1.5.0 or later.

**Name of the Vulnerable Software and Affected Versions** BitFire Security versions prior to 5.0.4 **Description** The BitFire Security plugin for WordPress contains a flaw allowing unauthorized access because a function lacks a proper capability check. This allows unauthenticated attackers to perform unauthorized actions. **Recommendations** Update to a version newer than 5.0.3.

**Name of the Vulnerable Software and Affected Versions** The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress versions prior to 27.0.4 **Description** The software is susceptible to CSV Injection through gallery submissions. This allows unauthenticated attackers to embed untrusted input into exported CSV files. Opening these files on a local system with a vulnerable configuration can lead to code execution. **Recommendations** Update to version 27.0.4 or later.