Gregory Allegoet

**Name of the Vulnerable Software and Affected Versions** ShopBuilder WordPress plugin versions prior to 3.2.2 **Description** The ShopBuilder WordPress plugin does not properly sanitize and escape a parameter before outputting it, resulting in a Reflected Cross-Site Scripting issue. This could potentially be used to target users with high privileges, such as administrators. **Recommendations** Update to ShopBuilder WordPress plugin version 3.2.2 or later.

**Name of the Vulnerable Software and Affected Versions** URL Shortify WordPress plugin versions prior to 1.11.4 **Description** The plugin does not properly sanitize and escape a parameter before displaying it on the page, resulting in a Reflected Cross-Site Scripting issue. This could potentially be used to target users with high privileges, such as administrators. **Recommendations** Update to version 1.11.4 or later.

**Name of the Vulnerable Software and Affected Versions** Team Members Showcase WordPress plugin versions prior to 3.5.0 **Description** The software does not properly sanitize and escape a parameter before displaying it on a page, creating a reflected cross-site scripting condition. This could potentially be used to compromise users with high privileges, such as administrators. **Recommendations** Update Team Members Showcase WordPress plugin to version 3.5.0 or later.