Park Hyunwoo

**Name of the Vulnerable Software and Affected Versions** Heateor Social Login versions prior to 1.1.40 **Description** An unauthenticated Cross Site Request Forgery (CSRF) issue exists in the Heateor Social Login plugin. CSRF is a flaw that allows an attacker to trick a victim into performing actions they did not intend to do on a web application. **Recommendations** Update Heateor Social Login to version 1.1.40 or later.

**Name of the Vulnerable Software and Affected Versions** Quotes llama versions prior to 3.1.6 **Description** An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows attackers to append additional SQL queries to existing ones to extract sensitive information from the database. **Recommendations** Update to a version newer than 3.1.5.