Rajesh Patil

**Name of the Vulnerable Software and Affected Versions** Ebook Downloader plugin for WordPress versions prior to 1.1 **Description** The issue is related to SQL Injection via the `download` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This allows unauthenticated attackers to append additional SQL queries into already existing queries, which can be used to extract sensitive information from the database. **Recommendations** For versions prior to 1.1, consider disabling the `download` parameter until a patch is available to prevent potential SQL Injection attacks. Restrict access to sensitive database information to minimize the risk of exploitation. Avoid using the `download` parameter in the affected plugin until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: The Newsletters plugin for WordPress versions up to, and including, 4.9.9.2 Description: The issue arises because the plugin does not restrict what user meta can be updated as screen options, making it possible for authenticated attackers with subscriber-level access and above to escalate their privileges to that of an administrator. This only affects users with access to edit/update screen options, which means an administrator would need to grant lower privilege users with access to the Sent & Draft Emails page of the plugin in order for this to be exploited. Recommendations: For versions up to, and including, 4.9.9.2, consider restricting access to the Sent & Draft Emails page of the plugin to minimize the risk of exploitation. As a temporary workaround, consider disabling the ability to edit/update screen options for lower privilege users until a patch is available.

**Name of the Vulnerable Software and Affected Versions** The Shopping Cart & eCommerce Store plugin for WordPress versions prior to 5.6.5 **Description** The issue allows unauthenticated attackers to extract sensitive data, including order details such as payment details, addresses, and other personally identifiable information (PII), via the order report functionality. **Recommendations** For versions prior to 5.6.5, update to version 5.6.5 or later to resolve the issue.