Mika

**Name of the Vulnerable Software and Affected Versions** Tormorten WP Microdata versions through 1.0 **Description** The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks. **Recommendations** Update Tormorten WP Microdata to a version later than 1.0.

**Name of the Vulnerable Software and Affected Versions** yonisink Custom Post Type Images versions through 0.5 **Description** A Cross-Site Request Forgery (CSRF) issue exists in yonisink Custom Post Type Images that can lead to Code Injection. The issue allows for potential code execution through crafted requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Luis Rock Master Paper Collapse Toggle versions through 1.1 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update to a version later than 1.1.

**Name of the Vulnerable Software and Affected Versions** Woocommerce Gifts Product versions through 1.0.0 **Description** The software contains a Cross-Site Request Forgery (CSRF) flaw. This allows attackers to perform actions on behalf of authenticated users without their knowledge. **Recommendations** Apply updates to versions prior to 1.0.0.

**Name of the Vulnerable Software and Affected Versions** WPBean WPB Image Widget versions through 1.1 **Description** The WPBean WPB Image Widget software contains a flaw due to improper neutralization of input during web page generation, which results in a Stored Cross-site Scripting (XSS) issue. **Recommendations** Update WPBean WPB Image Widget to a version later than 1.1.

**Name of the Vulnerable Software and Affected Versions** Tikolan FW Anker versions through 1.2.6 **Description** The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update Tikolan FW Anker to a version later than 1.2.6.

**Name of the Vulnerable Software and Affected Versions** Sudar Muthu WP Github Gist versions n/a through 0.5 **Description** The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update Sudar Muthu WP Github Gist to a version later than 0.5.

**Name of the Vulnerable Software and Affected Versions** Simasicher SimaCookie versions through 1.3.2 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting (XSS). **Recommendations** Update Simasicher SimaCookie to a version later than 1.3.2.

**Name of the Vulnerable Software and Affected Versions** Aparat Video Shortcode versions through 0.2.4 **Description** The Ali Aghdam Aparat Video Shortcode software contains a Stored Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web pages. **Recommendations** Update Aparat Video Shortcode to a version later than 0.2.4.

**Name of the Vulnerable Software and Affected Versions** Easy Download Media Counter versions through 1.2 **Description** The software contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks. **Recommendations** Update Easy Download Media Counter to a version later than 1.2.

**Name of the Vulnerable Software and Affected Versions** DigitalCourt Boxed Content versions through 1.0 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shiful H SS Font Awesome Icon versions through 4.1.3 **Description** The software contains a cross-site scripting (XSS) issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation. **Recommendations** Update Shiful H SS Font Awesome Icon to a version later than 4.1.3.

**Name of the Vulnerable Software and Affected Versions** Parallax Scrolling Enllax.js versions through 0.0.6 **Description** The software contains a cross-site scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. **Recommendations** Update Parallax Scrolling Enllax.js to a version later than 0.0.6.

**Name of the Vulnerable Software and Affected Versions** Parallax Scrolling Enllax.js versions through 0.0.6 **Description** A Cross-Site Request Forgery (CSRF) issue exists in Parallax Scrolling Enllax.js, potentially allowing attackers to perform actions on behalf of authenticated users. **Recommendations** Update Parallax Scrolling Enllax.js to a version beyond 0.0.6.

**Name of the Vulnerable Software and Affected Versions** George Sexton WordPress Events Calendar Plugin – connectDaily versions through 1.5.3 **Description** The WordPress Events Calendar Plugin – connectDaily contains a cross-site scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. **Recommendations** Update George Sexton WordPress Events Calendar Plugin – connectDaily to a version later than 1.5.3.

**Name of the Vulnerable Software and Affected Versions** Simasicher SimaCookie versions through 1.3.2 **Description** A Cross-Site Request Forgery (CSRF) vulnerability exists in Simasicher SimaCookie, which also allows Stored Cross-Site Scripting (XSS). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zakir Smooth Accordion versions through 2.1 **Description** The software contains a cross-site scripting (XSS) issue that allows for stored XSS attacks due to improper neutralization of input during web page generation. **Recommendations** Update Zakir Smooth Accordion to a version later than 2.1.

**Name of the Vulnerable Software and Affected Versions** premiumbizthemes Simple Price Calculator versions through 1.3 **Description** A flaw exists in premiumbizthemes Simple Price Calculator that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iamroody 金数据 versions n/a through 1.0 **Description** The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update iamroody 金数据 to a version later than 1.0.

**Name of the Vulnerable Software and Affected Versions** reubenthiessen Translate This gTranslate Shortcode versions through 1.0 **Description** The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS). **Recommendations** Update reubenthiessen Translate This gTranslate Shortcode to a version later than 1.0.