Pavan N

**Name of the Vulnerable Software and Affected Versions** Demi WordPress plugin versions prior to 0.0.7 **Description** The plugin stores full-site backup archives in a publicly accessible location using predictable filenames and lacks access protection. This allows unauthenticated attackers to download complete backups, which include the site database and user password hashes. **Recommendations** Update Demi WordPress plugin to version 0.0.7 or later.

**Name of the Vulnerable Software and Affected Versions** KeepInMind Dashboard Notes versions prior to 0.8.4.2 **Description** Stored Cross-Site Scripting (XSS) occurs in the KeepInMind Dashboard Notes plugin, affecting users with Contributor level permissions or higher. Stored XSS is a flaw where a malicious script is permanently stored on the target server, such as in a database, and later executed in the browser of a user visiting the affected page. **Recommendations** Update to version 0.8.4.2 or later.