Phat Rio

**Name of the Vulnerable Software and Affected Versions** Mobile App for WooCommerce versions prior to 0.4.63 **Description** An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions within the application. **Recommendations** Update to a version newer than 0.4.62.

**Name of the Vulnerable Software and Affected Versions** ez Form Calculator Premium versions prior to 2.14.1.3 **Description** The plugin contains a broken access control issue that allows unauthenticated users to bypass authorization restrictions. **Recommendations** Update to a version newer than 2.14.1.2.

**Name of the Vulnerable Software and Affected Versions** Booked versions prior to 3.0.1 **Description** An unauthenticated Cross Site Request Forgery (CSRF) issue exists, which allows an attacker to induce a user to perform actions they did not intend to execute. **Recommendations** Update to a version newer than 3.0.0.

**Name of the Vulnerable Software and Affected Versions** Booked versions prior to 3.0.1 **Description** Broken access control allows users with subscriber privileges to perform unauthorized actions. **Recommendations** Update to a version newer than 3.0.0.

**Name of the Vulnerable Software and Affected Versions** ARMember Premium versions prior to 7.6 **Description** Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic. **Recommendations** Update ARMember Premium to version 7.6 or later.

Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.

Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.

Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

**Name of the Vulnerable Software and Affected Versions** BookPro versions prior to 1.1.1 **Description** The BookPro - Appointment Booking WordPress Plugin contains a flaw allowing unauthenticated attackers to delete arbitrary files on the server. This occurs due to insufficient file path validation, which can lead to remote code execution if critical files, such as `wp-config.php`, are deleted. **Recommendations** Update the plugin to a version later than 1.1.0.

**Name of the Vulnerable Software and Affected Versions** Support Board versions prior to 3.8.9 **Description** An issue exists that allows unauthenticated attackers to perform privilege escalation, enabling them to elevate their access levels within the system. **Recommendations** Update to version 3.8.9 or later.

**Name of the Vulnerable Software and Affected Versions** Booknetic versions prior to 4.8.6 **Description** The Booknetic plugin for WordPress contains a broken authentication flaw. A missing capability check in a function allows unauthenticated attackers to perform unauthorized actions. **Recommendations** Update to a version newer than 4.8.5.

**Name of the Vulnerable Software and Affected Versions** NanoCare versions prior to 1.2.2 **Description** A missing authorization issue in Linethemes NanoCare allows for the exploitation of incorrectly configured access control security levels, resulting in broken access control. **Recommendations** Update to version 1.2.2.

**Name of the Vulnerable Software and Affected Versions** B2BKing versions prior to 5.2.10 **Description** A missing authorization issue allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify if a user has the necessary permissions to perform an action. **Recommendations** Update to version 5.2.10 or later.

**Name of the Vulnerable Software and Affected Versions** WooCommerce Product Filters versions prior to 2.0.6 **Description** An unauthenticated PHP Object Injection issue exists in the software. PHP Object Injection occurs when user-supplied input is passed to the `unserialize()` function without proper validation, potentially allowing an attacker to manipulate objects and execute arbitrary code. **Recommendations** Update to version 2.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** EmallShop versions prior to 2.4.22 **Description** The EmallShop theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection occurs when an application deserializes data from an untrusted source, potentially allowing an attacker to manipulate the object's properties. While no POP chain (a sequence of gadgets used to achieve code execution) is present in the software itself, the presence of a POP chain via other installed plugins or themes could enable the deletion of arbitrary files, retrieval of sensitive data, or remote code execution. **Recommendations** Update to a version newer than 2.4.21.

**Name of the Vulnerable Software and Affected Versions** Kapee versions prior to 1.7.0 **Description** This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain (a sequence of gadgets used to achieve code execution) is present in the software itself, the presence of a POP chain via another installed plugin or theme could enable the deletion of arbitrary files, retrieval of sensitive data, or remote code execution. **Recommendations** Update to version 1.7.0 or later.

**Name of the Vulnerable Software and Affected Versions** PressMart versions prior to 1.2.27 **Description** The PressMart theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. Deserialization is the process of converting a stored data format back into an object. While no POP chain (a sequence of gadgets used to achieve code execution) is present in the software itself, the presence of a POP chain via other installed plugins or themes could enable the deletion of arbitrary files, retrieval of sensitive data, or remote code execution. **Recommendations** Update PressMart to a version later than 1.2.26.

**Name of the Vulnerable Software and Affected Versions** Alukas versions prior to 3.0.0 **Description** Unauthenticated attackers can perform PHP Object Injection through the deserialization of untrusted input. This occurs when the application takes user-supplied data and passes it to the PHP `unserialize()` function without proper validation. While no POP chain (a sequence of gadgets used to achieve code execution) is present in the software itself, the presence of a POP chain via other installed plugins or themes could allow for arbitrary file deletion, retrieval of sensitive data, or remote code execution. **Recommendations** Update to version 3.0.0 or later.

**Name of the Vulnerable Software and Affected Versions** ListingPro versions prior to 2.9.11 **Description** The ListingPro Plugin for WordPress contains a flaw where insufficient escaping of user-supplied parameters and a lack of preparation in SQL queries allow unauthenticated attackers to append additional SQL queries. This can be used to extract sensitive information from the database. **Recommendations** Update ListingPro to a version newer than 2.9.10.

**Name of the Vulnerable Software and Affected Versions** ThimPress BuilderPress versions through 2.0.1 **Description** The software contains a flaw due to improper control of filenames in PHP program, leading to PHP Local File Inclusion. This allows attackers to potentially read arbitrary files. The issue is identified as a PHP Remote File Inclusion. **Recommendations** Update ThimPress BuilderPress to a version later than 2.0.1.