Rapid0Nion

**Name of the Vulnerable Software and Affected Versions** Tobias CF7 WOW Styler versions prior to 1.7.6 **Description** A missing authorization issue allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update to a version newer than 1.7.6.

**Name of the Vulnerable Software and Affected Versions** UpsellWP versions through 2.2.3 **Description** A missing authorization issue exists in flycart UpsellWP checkout-upsell-and-order-bumps, allowing exploitation of incorrectly configured access control security levels. **Recommendations** Update UpsellWP to a version newer than 2.2.3.

**Name of the Vulnerable Software and Affected Versions** Ecwid Shopping Cart versions through 7.0.5 **Description** The Ecwid Shopping Cart software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue allows exploitation due to missing authorization. **Recommendations** Update Ecwid Shopping Cart to a version newer than 7.0.5.

**Name of the Vulnerable Software and Affected Versions** WP Swings Points and Rewards for WooCommerce versions through 2.9.5 **Description** An authorization issue exists in WP Swings Points and Rewards for WooCommerce, allowing exploitation due to incorrectly configured access control security levels. **Recommendations** Update WP Swings Points and Rewards for WooCommerce to a version newer than 2.9.5.

**Name of the Vulnerable Software and Affected Versions** Apimo Connector versions through 2.6.4 **Description** An authorization issue exists in the Apimo Connector plugin. This allows exploitation of incorrectly configured access control security levels. **Recommendations** Update Apimo Connector to a version later than 2.6.4.

**Name of the Vulnerable Software and Affected Versions** o2oe E-Invoice App Malaysia versions through 1.1.0 **Description** The o2oe E-Invoice App Malaysia application contains a flaw that allows the retrieval of embedded sensitive data, potentially exposing system information to unauthorized parties. **Recommendations** Update to a version later than 1.1.0.