Haind

**Name of the Vulnerable Software and Affected Versions** ChatBot versions prior to 8.3.3 **Description** Unauthenticated Cross Site Scripting (XSS) allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. **Recommendations** Update to a version newer than 8.3.2.

**Name of the Vulnerable Software and Affected Versions** WP EasyCart versions prior to 5.9.1 **Description** An issue exists that allows users with contributor privileges to perform a SQL Injection. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update WP EasyCart to a version newer than 5.9.0.

**Name of the Vulnerable Software and Affected Versions** Landing Page Builder versions prior to 1.5.3.6 **Description** An unauthenticated Cross Site Scripting (XSS) issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into the landing page builder. **Recommendations** Update Landing Page Builder to version 1.5.3.6 or later.

**Name of the Vulnerable Software and Affected Versions** Japanized For WooCommerce versions prior to 2.9.13 **Description** An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. **Recommendations** Update Japanized For WooCommerce to version 2.9.13 or later.

**Name of the Vulnerable Software and Affected Versions** WP Fast Total Search versions prior to 1.80.281 **Description** The WP Fast Total Search plugin for WordPress contains a flaw allowing unauthenticated attackers to perform SQL Injection. This occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query, enabling the execution of additional queries to extract sensitive information from the database. **Recommendations** Update the plugin to a version later than 1.80.280.

**Name of the Vulnerable Software and Affected Versions** Ads by WPQuads versions prior to 3.0.4 **Description** An issue exists that allows unauthenticated users to access sensitive data. **Recommendations** Update Ads by WPQuads to version 3.0.4 or later.

**Name of the Vulnerable Software and Affected Versions** Themeisle PPOM for WooCommerce versions prior to 33.0.19 **Description** Improper access control exists due to a missing capability check in a function, allowing unauthenticated attackers to exploit incorrectly configured security levels and perform unauthorized actions. **Recommendations** Update to a version newer than 33.0.18.

**Name of the Vulnerable Software and Affected Versions** Motors versions prior to 1.4.110 **Description** The Motors – Car Dealership & Classified Listings Plugin for WordPress contains a broken access control issue. This is caused by a missing capability check within a function, allowing unauthenticated attackers to perform unauthorized actions. **Recommendations** Update the plugin to a version later than 1.4.109.

**Name of the Vulnerable Software and Affected Versions** Property Hive versions prior to 2.2.3 **Description** Insufficient input sanitization and output escaping allow for DOM-Based and Stored Cross-Site Scripting (XSS), a condition where arbitrary web scripts are injected into pages and executed when a user accesses them. This issue can be exploited by unauthenticated attackers. **Recommendations** Update to a version newer than 2.2.2.