Huseyin Mertoglu

**Name of the Vulnerable Software and Affected Versions** Brave Popup Builder versions prior to 0.8.6 **Description** Brave Popup Builder reflects UTM query parameters into the popup form HTML without proper escaping, leading to Reflected Cross-Site Scripting (XSS). This occurs when the application takes user-supplied input from UTM parameters and includes it in the HTML response without sanitization. **Recommendations** Update Brave Popup Builder to version 0.8.6 or later.

**Name of the Vulnerable Software and Affected Versions** Brave Popup Builder versions prior to 0.8.6 **Description** Brave Popup Builder contains a broken access control issue. Any authenticated user, including those with Subscriber or WooCommerce Customer roles, can access and read popup content they are not authorized to view by providing a post ID within the URL. **Recommendations** Update Brave Popup Builder to version 0.8.6 or later.

**Name of the Vulnerable Software and Affected Versions** Classified Listing WordPress plugin versions prior to 5.4.4 **Description** An AJAX action that returns post content fails to perform necessary capability or ownership checks. This allows users with contributor-level access or higher to read the content of any post, page, or custom post type on the site, including private, pending, and draft content owned by other users. **Recommendations** Update the Classified Listing WordPress plugin to version 5.4.4 or later.

**Name of the Vulnerable Software and Affected Versions** Classified Listing WordPress plugin versions prior to 5.4.4 **Description** An issue exists where a capability check is not performed on an AJAX action that returns aggregated store revenue totals. This allows users with contributor-level access and above to read daily revenue figures that are normally restricted to administrators and report managers. **Recommendations** Update the Classified Listing WordPress plugin to version 5.4.4 or later.