Naveen Muthusamy

**Name of the Vulnerable Software and Affected Versions** Defender Security versions n/a through 4.2.0 **Description** The issue is related to an Improper Authentication vulnerability, allowing access to functionality not properly constrained by ACLs. **Recommendations** For Defender Security versions n/a through 4.2.0, update to a version later than 4.2.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** LWS Hide Login versions 2.1.8 and earlier **Description** The issue is related to the exposure of sensitive information to unauthorized actors due to accessing functionality not properly constrained by Access Control Lists (ACLs). **Recommendations** For LWS Hide Login versions 2.1.8 and earlier, update to a version later than 2.1.8 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Webcraftic Hide login page versions 1.1.9 and earlier **Description** The issue is related to Exposure of Sensitive Information to an Unauthorized Actor, allowing access to functionality not properly constrained by ACLs. **Recommendations** For versions 1.1.9 and earlier, update to a version that properly constrains functionality by ACLs to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WPS Hide Login versions 1.9.11 and earlier **Description** The issue allows exposure of sensitive information to an unauthorized actor due to accessing functionality not properly constrained by ACLs. This affects the WPS Hide Login plugin. **Recommendations** For versions 1.9.11 and earlier, update to a version later than 1.9.11 to resolve the issue. As a temporary workaround, consider restricting access to sensitive functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Ultimate Dashboard versions 3.7.10 and earlier **Description** The issue allows exposure of sensitive information to an unauthorized actor due to accessing functionality not properly constrained by ACLs. **Recommendations** For Ultimate Dashboard versions 3.7.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** All In One WP Security & Firewall versions 5.2.4 and earlier **Description** The issue affects the All In One WP Security & Firewall plugin, allowing exposure of sensitive information to unauthorized actors due to improperly constrained access to certain functionality by ACLs. **Recommendations** For versions 5.2.4 and earlier, update to a version later than 5.2.4 to resolve the issue.