Jon Cagan

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied `infill text` parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries. This can be used to extract sensitive information from the database. Recommendations: For versions up to, and including, 2.1.3.6, consider disabling the `infill text` parameter until a patch is available to prevent potential SQL injection attacks. As a temporary workaround, restrict access to the SQL query that utilizes the `infill text` parameter to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue allows unauthenticated attackers to perform SQL Injection via the `coating text` parameter due to insufficient escaping of user-supplied input and lack of preparation in the existing SQL query. This enables attackers to append additional SQL queries to existing ones, potentially extracting sensitive information from the database. Recommendations: For versions up to, and including, 2.1.3.6, consider disabling the `coating text` parameter until a patch is available to prevent SQL Injection attacks. Restrict access to sensitive database information to minimize the risk of exploitation. Avoid using the `coating text` parameter in SQL queries until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied `material text` parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries. This can be used to extract sensitive information from the database. Recommendations: For versions up to, and including, 2.1.3.6, avoid using the `material text` parameter in SQL queries until a patch is available. As a temporary workaround, consider restricting access to the SQL query functionality to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied `printer text` parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries. This can be used to extract sensitive information from the database. Recommendations: For versions up to, and including, 2.1.3.6, consider disabling the `printer text` parameter until a patch is available to prevent SQL injection attacks. Avoid using the `printer text` parameter in affected API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Podlove Podcast Publisher plugin for WordPress version <= 4.1.25 **Description** The issue is related to Stored Cross-Site Scripting via the Feed Name value due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For version <= 4.1.25, update to a version greater than 4.1.25 to resolve the issue. As a temporary workaround, consider restricting access to the Feed Name value to minimize the risk of exploitation. Additionally, enabling unfiltered html or taking other measures to ensure proper input sanitization and output escaping can help mitigate the risk.