Lucky_Buddy

An authentication bypass exists due to the Firebase verification flow in the 'lwp ajax register' AJAX handler not binding the Firebase session to the phone number supplied in the request. The `idehweb lwp activate through firebase()` function validates the legitimacy of a Firebase OTP session, but it fails to compare the `phoneNumber` returned by Firebase against the victim's stored phone number. This allows unauthenticated attackers to authenticate as any user with a phone number stored in user meta, including administrators, by verifying their own Firebase session and providing the victim's phone number in the request.

The plugin for WordPress is susceptible to a denial of service. An unauthenticated attacker can exhaust PHP worker processes, preventing legitimate users from accessing the site. This occurs because the REST API endpoint "/wp-json/ssa/v1/async" invokes the PHP `sleep()` function using a user-supplied `delay` parameter without implementing rate limiting.

Name of the Vulnerable Software and Affected Versions Product Feed PRO for WooCommerce by AdTribes versions 13.4.6 through 13.5.2.1 Description The Product Feed PRO for WooCommerce plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation. Specifically, the `ajax migrate to custom post type`, `ajax adt clear custom attributes product meta keys`, `ajax update file url to lower case`, `ajax use legacy filters and rules`, and `ajax fix duplicate feed` functions are affected. Successful exploitation allows unauthenticated attackers to trigger actions like feed migration, clearing caches, rewriting file URLs, toggling settings, and deleting posts by tricking a site administrator into performing an action. Recommendations For versions 13.4.6 through 13.5.2.1, ensure nonce validation is implemented correctly for the `ajax migrate to custom post type`, `ajax adt clear custom attributes product meta keys`, `ajax update file url to lower case`, `ajax use legacy filters and rules`, and `ajax fix duplicate feed` functions.

The NewsBlogger WordPress theme is susceptible to Cross-Site Request Forgery due to inadequate nonce validation within the `newsblogger install and activate plugin()` function. This allows unauthenticated attackers to potentially upload arbitrary files and achieve remote code execution by deceiving a site administrator into performing an action, such as clicking a malicious link. This issue represents a regression of a previous fix.

An issue exists where unauthenticated attackers can perform time-based blind SQL Injection. This occurs due to insufficient escaping of the user-supplied `columns` parameter and a lack of proper preparation of the SQL query. This flaw allows attackers to append additional SQL queries to existing ones to extract sensitive information from the database. Time-based blind SQL Injection is a technique used to infer data from a database by observing the time it takes for the server to respond to specific queries.

The plugin does not properly validate that an One-Time Password (OTP) was generated before comparing it to user input within the `user verification form wrap process otpLogin` function. This allows unauthenticated attackers to log in as any user with a verified email address, including administrators, by submitting an empty OTP value.

The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is susceptible to Cross-Site Request Forgery. This is because of inadequate or absent nonce validation within the `parseData` function. Successful exploitation allows unauthenticated attackers to export sensitive information, including user data, email addresses, password hashes, and WooCommerce data. The attacker can specify an attacker-controlled file path on the server for the exported data, requiring a site administrator to perform an action, such as clicking a malicious link, to complete the attack.

The Booster for WooCommerce plugin for WordPress is susceptible to arbitrary file uploads due to the absence of file type validation within the `add files to order` function. This allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution on the affected server, contingent upon specific configuration settings that execute the first file extension present.

The software contains a Cross-Site Request Forgery (CSRF) flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge.

Name of the Vulnerable Software and Affected Versions: (Simply) Guest Author Name versions n/a through 4.36 Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This enables potential attackers to execute malicious scripts in the context of the affected web page. Recommendations: For versions n/a through 4.36, update to a version that addresses the improper neutralization of input during web page generation to prevent DOM-Based XSS attacks.

Name of the Vulnerable Software and Affected Versions: FormLift for Infusionsoft Web Forms versions through 7.5.20 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For FormLift for Infusionsoft Web Forms versions through 7.5.20, update to a version later than 7.5.20 to resolve the issue.

The issue is related to a Missing Authorization vulnerability in SolaPlugins Sola Support Ticket, which allows exploiting incorrectly configured access control security levels.

A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed. This can lead to security breaches where an attacker can trick a user into performing unintended actions on the web application.

Name of the Vulnerable Software and Affected Versions: RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce versions through 2.0.3 Description: A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions. Recommendations: For versions through 2.0.3, update to a version later than 2.0.3 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Japanized For WooCommerce versions 2.6.40 and earlier Description: A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited by tricking a user into performing an unintended action on the web application. Recommendations: For versions 2.6.40 and earlier, update to a version later than 2.6.40 to resolve the issue. As a temporary workaround, consider implementing additional validation checks on requests to prevent unauthorized actions. Restrict access to sensitive functionality to minimize the risk of exploitation.

A Cross-Site Request Forgery (CSRF) issue affects ThimPress WP Hotel Booking, allowing unauthorized actions to be performed on behalf of a user.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, potentially leading to the execution of malicious scripts stored on the server.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to.

A Cross-Site Request Forgery (CSRF) issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including unauthorized changes to user accounts or other malicious activities.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into performing a specific action, such as clicking a link or submitting a form, that the attacker has crafted to exploit the vulnerability.