Maysbachs

**Name of the Vulnerable Software and Affected Versions** Jenkins versions prior to 2.555 Jenkins LTS versions prior to 2.541.3 **Description** Unsafe handling of symbolic links during the extraction of .tar and .tar.gz archives allows attackers with Item/Configure permission, or those who can control agent processes, to write files to arbitrary locations on the filesystem. This action is restricted only by the file system access permissions of the user running Jenkins. Such a flaw could enable the deployment of malicious scripts or plugins on the Jenkins controller, potentially leading to unauthorized code execution. **Recommendations** Update Jenkins to version 2.555 or later. Update Jenkins LTS to version 2.541.3 or later.

**Name of the Vulnerable Software and Affected Versions** Jenkins LoadNinja Plugin versions 2.1 and earlier **Description** The Jenkins LoadNinja Plugin does not properly mask LoadNinja API keys as they are displayed on the job configuration form. This could allow attackers to observe and capture these keys. **Recommendations** Update to a newer version of the Jenkins LoadNinja Plugin that addresses this issue.

**Name of the Vulnerable Software and Affected Versions** UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress versions through 1.2.44 **Description** The UsersWP plugin for WordPress is susceptible to a time-based SQL Injection issue due to insufficient escaping of user-supplied parameters and inadequate preparation of existing SQL queries. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive information from the database via the `upload file remove` function and the `htmlvar` parameter. **Recommendations** Update to version 1.2.45.

**Name of the Vulnerable Software and Affected Versions** WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 **Description** The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contains a Stored Cross-Site Scripting issue due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts into pages, which will execute when a user accesses the injected page. This only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** Update WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce to a version later than 3.1.49.

**Name of the Vulnerable Software and Affected Versions** WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50 **Description** The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the `organizer name` parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute when a user accesses an injected page. **Recommendations** Update WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce to version 3.1.50 or later.

**Name of the Vulnerable Software and Affected Versions** The Ultimate Blocks – WordPress Blocks Plugin versions up to, and including, 3.3.3 **Description** The issue is related to Stored Cross-Site Scripting via multiple widgets due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 3.3.3, update to a version that addresses the insufficient input sanitization and output escaping issue to prevent Stored Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the plugin's widgets for users with Contributor-level access and above until a patch is available.