Marim00

**Name of the Vulnerable Software and Affected Versions** LitExtension WordPress plugin versions prior to 1.2.6 **Description** The plugin fails to verify a nonce (a unique token used to prevent replay attacks) before performing an administrative action that overwrites the store-migration connector's authentication token. This allows an attacker to perform a Cross-Site Request Forgery (CSRF) attack by tricking a logged-in administrator into clicking a specially crafted link, which can lead to the takeover of the connector token. **Recommendations** Update the plugin to version 1.2.6 or later.

**Name of the Vulnerable Software and Affected Versions** Easy Booking WordPress plugin versions prior to 3.5.0 **Description** The plugin fails to enforce the configured minimum booking duration on the server side during the process of adding a product to the cart and calculating the booking price. This allows unauthenticated users to create bookings that are shorter than the required minimum and complete orders with prices lower than intended. **Recommendations** Update Easy Booking WordPress plugin to version 3.5.0 or later.

**Name of the Vulnerable Software and Affected Versions** WP Travel Engine versions prior to 6.8.1 **Description** Authenticated users with subscriber-level access and above can relocate arbitrary files within the WordPress uploads directory into their own profile-image path. This occurs because the plugin fails to properly validate the source of the user-supplied profile image path before moving the file. This action removes the targeted media from its original location, which can result in broken content across the site. The issue involves the `user profile image` variable. **Recommendations** Update WP Travel Engine to version 6.8.1 or later.