Johannes Skamletz

**Name of the Vulnerable Software and Affected Versions** YANewsflash plugin for WordPress versions prior to 1.0.4 **Description** The YANewsflash plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the `yanewsflash/yanewsflash.php` page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action, such as clicking a link. **Recommendations** Update the YANewsflash plugin to version 1.0.4 or later.

**Name of the Vulnerable Software and Affected Versions** Latest Post Accordian Slider plugin for WordPress versions prior to 1.4 **Description** The Latest Post Accordian Slider plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the `lpaccordian` page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action, such as clicking a link. **Recommendations** Update the Latest Post Accordian Slider plugin to version 1.4 or later.

**Name of the Vulnerable Software and Affected Versions** Like & Share My Site plugin for WordPress versions prior to 0.3 **Description** The plugin is susceptible to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the `lsms admin` page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action, such as clicking a link. **Recommendations** Update the Like & Share My Site plugin to version 0.3 or later.

**Name of the Vulnerable Software and Affected Versions** Avishi WP PayPal Payment Button versions prior to 2.1 **Description** The Avishi WP PayPal Payment Button plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the `/avishi-wp-paypal-payment-button/index.php` page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action, such as clicking a link. **Recommendations** Update Avishi WP PayPal Payment Button to version 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Zuppler Online Ordering plugin for WordPress versions prior to 2.1.1 **Description** The plugin is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'zuppler-online-ordering-options' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action, such as clicking a link. **Recommendations** Update the Zuppler Online Ordering plugin to version 2.1.1 or later.

**Name of the Vulnerable Software and Affected Versions** Attachment Manager plugin for WordPress versions up to and including 2.1.2 **Description** The Attachment Manager plugin for WordPress is susceptible to arbitrary file deletion due to inadequate file path validation within the `handle actions()` function. This allows unauthenticated attackers to delete arbitrary files on the server, potentially leading to remote code execution if critical files, such as `wp-config.php`, are deleted. **Recommendations** Update the Attachment Manager plugin to a version later than 2.1.2.

**Name of the Vulnerable Software and Affected Versions** Restrict File Access plugin for WordPress versions up to and including 1.1.2 **Description** The Restrict File Access plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'restrict-file-access' page. This allows unauthenticated attackers to delete arbitrary files on the server, potentially leading to remote code execution if a critical file, such as `wp-config.php`, is deleted through a forged request initiated by tricking a site administrator into performing an action. **Recommendations** Update the Restrict File Access plugin to a version later than 1.1.2.

Name of the Vulnerable Software and Affected Versions: ProcessingJS for WordPress versions 1.2.2 and earlier Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the `pjs4wp` shortcode. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts in pages. These scripts will execute when a user accesses an injected page. Recommendations: For versions 1.2.2 and earlier, update to a version later than 1.2.2 to resolve the issue. As a temporary workaround, consider restricting access to the `pjs4wp` shortcode to prevent potential exploitation.

Name of the Vulnerable Software and Affected Versions: yContributors plugin for WordPress versions up to, and including, 0.5 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'yContributors' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. Recommendations: For yContributors plugin for WordPress versions up to, and including, 0.5, consider disabling the plugin until a patch is available to prevent exploitation. Restrict access to the 'yContributors' page to minimize the risk of exploitation. Avoid performing actions that could be triggered by a forged request, such as clicking on links from untrusted sources, until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Easy Flashcards plugin for WordPress version 0.1 and earlier **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'ef settings submenu' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action such as clicking on a link. **Recommendations** For Easy Flashcards plugin for WordPress version 0.1 and earlier, update to a version that includes proper nonce validation to prevent Cross-Site Request Forgery attacks. As a temporary workaround, consider restricting access to the 'ef settings submenu' page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** kk Youtube Video plugin for WordPress versions up to, and including, 0.2 **Description** The issue is related to Stored Cross-Site Scripting via the plugin's 'kkytv' shortcode due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 0.2, update to a version that addresses the insufficient input sanitization and output escaping issue. As a temporary workaround, consider restricting access to the 'kkytv' shortcode for users with contributor-level access and above until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Restrict File Access plugin for WordPress versions up to, and including, 1.1.2 **Description** The issue allows authenticated attackers with Subscriber-level access and above to read the contents of arbitrary files on the server, which can contain sensitive information, via the `output()` function. **Recommendations** For Restrict File Access plugin for WordPress versions up to, and including, 1.1.2, consider disabling the `output()` function until a patch is available to prevent exploitation.

**Name of the Vulnerable Software and Affected Versions** Yougler Blogger Profile Page plugin for WordPress versions up to, and including, v1.01 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'yougler-plugin.php' page. This allows unauthenticated attackers to update the plugin's settings via a forged request if they can trick a site administrator into performing an action such as clicking on a link. **Recommendations** For versions up to, and including, v1.01, consider disabling the `yougler-plugin.php` page or restricting access to it until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** XiSearch bar plugin for WordPress versions up to, and including, 2.6 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'xisearch-key-config' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. **Recommendations** For versions up to, and including, 2.6, consider disabling access to the 'xisearch-key-config' page until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zen Sticky Social plugin for WordPress versions up to, and including, 0.3 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. **Recommendations** For versions up to, and including, 0.3, update to a version that includes proper nonce validation to prevent Cross-Site Request Forgery attacks. As a temporary workaround, consider restricting access to the 'zen-social-sticky/zen-sticky-social.php' page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WP URL Shortener plugin for WordPress versions up to, and including, 1.2 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'url shortener settings' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. **Recommendations** For WP URL Shortener plugin for WordPress versions up to, and including, 1.2, update to a version that includes proper nonce validation to prevent Cross-Site Request Forgery attacks. As a temporary workaround, consider restricting access to the 'url shortener settings' page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** 4stats plugin for WordPress versions up to, and including, 2.0.9 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the "stats/stats.php" page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. **Recommendations** For versions up to, and including, 2.0.9, update to a version later than 2.0.9 to resolve the issue. As a temporary workaround, consider restricting access to the "stats/stats.php" page to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Audio Comments Plugin versions up to, and including, 1.0.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'audio-comments/audior-settings.php' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. Recommendations: For versions up to, and including, 1.0.4, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the 'audio-comments/audior-settings.php' page to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: AlT Monitoring plugin for WordPress versions up to, and including, 1.0.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'ALT Monitoring edit' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. Recommendations: For versions up to, and including, 1.0.3, update to a version that includes the necessary nonce validation to prevent Cross-Site Request Forgery attacks. As a temporary workaround, consider restricting access to the 'ALT Monitoring edit' page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Alink Tap plugin for WordPress versions up to, and including, 1.3.1 **Description** The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'alink-tap' page. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request, provided they can trick a site administrator into performing a specific action, such as clicking on a link. **Recommendations** For Alink Tap plugin for WordPress versions up to, and including, 1.3.1, update to a version later than 1.3.1 to resolve the issue. As a temporary workaround, consider restricting access to the 'alink-tap' page to minimize the risk of exploitation.