Nudien

**Name of the Vulnerable Software and Affected Versions** Frontend Admin by DynamiApps versions prior to 3.29.13 **Description** Insufficient file path validation in the `move folders()` function allows unauthenticated attackers to delete arbitrary files on the server. This issue is exploitable when a form is configured with public visibility (`who can see='all'`), as the required nonce is publicly obtainable from the rendered form. Deleting critical files, such as `wp-config.php`, can lead to remote code execution. **Recommendations** Update the plugin to version 3.29.13 or later.

**Name of the Vulnerable Software and Affected Versions** Link Library versions prior to 7.9.5 **Description** Insufficient file path validation in the `ll delete link fields()` function allows unauthenticated attackers to delete arbitrary files on the server. This can lead to remote code execution if critical files, such as `wp-config.php`, are deleted. Exploitation occurs if the administrator has enabled the 'Delete local file on link deletion' option and subsequently performs a routine moderation action by permanently deleting a link submitted by the attacker. **Recommendations** Update to a version newer than 7.9.4. Disable the 'Delete local file on link deletion' plugin option to prevent exploitation.

**Name of the Vulnerable Software and Affected Versions** Search Analytics for WP versions prior to 1.4.17 **Description** The plugin is susceptible to Cross-Site Request Forgery (CSRF), a flaw where an attacker tricks a victim into performing actions they did not intend to. This occurs due to missing or incorrect nonce validation—a security token used to verify that a request is legitimate—within the `process bulk action()` function of `MWTSA Stats Table`. Unauthenticated attackers can exploit this to delete arbitrary search-term records and associated search-history rows by inducing a user with access to the Search Analytics dashboard, such as an Administrator, to click a malicious link. **Recommendations** Update Search Analytics for WP to version 1.4.17 or later.

**Name of the Vulnerable Software and Affected Versions** MyParcel versions prior to 4.25.2 **Description** The MyParcel plugin for WordPress contains an authorization bypass that allows authenticated users with subscriber-level access or higher to view and modify shipment options on any arbitrary order. This includes details such as carrier, delivery type, package type, number of labels, weight, signature requirement, and insurance. The issue occurs because the plugin fails to properly verify user authorization when processing the `wcmp get shipment options` and `wcmp save shipment options` AJAX actions. **Recommendations** Update the plugin to a version newer than 4.25.1. As a temporary mitigation, restrict access to the `wcmp get shipment options` and `wcmp save shipment options` AJAX actions for users with subscriber-level permissions.

**Name of the Vulnerable Software and Affected Versions** DSGVO All in one for WP versions prior to 5.0 **Description** The plugin contains a missing authorization flaw within the `dsgvo reset policy service func()` function. The function fails to perform capability checks and nonce verification when processing user-supplied parameters to reset plugin options. This allows authenticated users with Subscriber-level access or higher to reset customized privacy policy content, including cookie notices and policies for Google Analytics, Facebook, and YouTube, back to their default values. **Recommendations** Update to a version newer than 4.9. As a temporary mitigation, restrict access to the `dsgvo reset policy service func()` function.