Ngo Bui Truong Vu

**Name of the Vulnerable Software and Affected Versions** PDF Invoices for WooCommerce + Drag and Drop Template Builder versions through 5.3.8 **Description** The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions through 5.3.8, update to a version later than 5.3.8 to resolve the issue. As a temporary workaround, consider restricting access to the SQL database to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** wpdever Cart tracking for WooCommerce versions 1.0.0 through 1.0.17 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions 1.0.0 through 1.0.17, update to a version later than 1.0.17 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mario Peshev WP-CRM System versions 3.4.1 and earlier **Description** The issue is related to Deserialization of Untrusted Data, which allows Object Injection. **Recommendations** For Mario Peshev WP-CRM System versions 3.4.1 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ELEX Product Feed for WooCommerce versions 3.1.2 and earlier **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For ELEX Product Feed for WooCommerce versions 3.1.2 and earlier, update to a version later than 3.1.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WP Maintenance versions through 6.1.9.7 **Description** The issue is related to Deserialization of Untrusted Data, which allows Object Injection. **Recommendations** For versions through 6.1.9.7, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Michael Cannon Flickr Shortcode Importer versions n/a through 2.2.3 **Description** The issue is related to Deserialization of Untrusted Data, which allows Object Injection. **Recommendations** For versions n/a through 2.2.3, update to a version later than 2.2.3 to resolve the issue. As a temporary workaround, consider restricting the deserialization of untrusted data until a patch is available.