Pwn.Ai

**Name of the Vulnerable Software and Affected Versions** WordPress versions prior to 7.0.4 **Description** An authenticated user with Author level privileges or higher can achieve remote code execution by uploading a malicious Postscript file. This issue occurs when the server utilizes Imagick and Ghostscript and the user possesses the `upload files` capability. **Recommendations** Update to version 7.0.4 or the latest patched version for your specific branch.

**Name of the Vulnerable Software and Affected Versions** WordPress (affected versions not specified) **Description** WordPress is subject to a pre-authentication reflected cross-site scripting (XSS) issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without requiring authentication. Under specific deployment conditions and with an authenticated Administrator, this flaw can be chained to achieve remote code execution (RCE), which is the ability to execute arbitrary PHP code on the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Mac versions prior to 150.0.7871.47 **Description** An inappropriate implementation in the Select element allows a remote attacker to spoof the contents of the Omnibox (URL bar) using a crafted HTML page. This occurs when a tall `<select>` element is positioned partly above the viewport, causing the browser to paint over the Omnibox. **Recommendations** Update Google Chrome on Mac to version 150.0.7871.47 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Android versions prior to 150.0.7871.47 **Description** An inappropriate implementation in the PreviewTab allows a remote attacker to perform UI spoofing via a crafted HTML page. This occurs when a user is convinced to engage in specific UI gestures. UI spoofing is a technique used to trick users into believing they are interacting with a legitimate interface when they are actually interacting with a malicious one. **Recommendations** Update Google Chrome on Android to version 150.0.7871.47 or later.