Morato Antoine

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

**Name of the Vulnerable Software and Affected Versions** Estatik Real Estate Plugin WordPress plugin versions prior to 4.3.5 **Description** Reflected Cross-Site Scripting occurs because the plugin fails to sanitize and escape several values decoded from a request parameter before reflecting them in an unauthenticated AJAX response. Cross-Site Scripting is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. **Recommendations** Update the plugin to version 4.3.5 or later.

**Name of the Vulnerable Software and Affected Versions** Easy Appointments versions prior to 4.0.2.2 **Description** The plugin fails to use an unguessable token to authorize appointment cancellation and confirmation actions via mail-links. The token is derived from a hardcoded source-embedded salt and the appointment's creation timestamp. Consequently, unauthenticated attackers who can determine or guess the timestamp can cancel or confirm arbitrary appointments. **Recommendations** Update to version 4.0.2.2 or later.

**Name of the Vulnerable Software and Affected Versions** Rox Appointment Booking versions prior to 1.2.0 **Description** The plugin fails to verify the order total or the selected payment method against server-side pricing during the booking creation process. This allows unauthenticated attackers to create confirmed bookings at an arbitrary price and bypass configured payment-method restrictions. **Recommendations** Update Rox Appointment Booking to version 1.2.0 or later.