Real_King_Engine

**Name of the Vulnerable Software and Affected Versions** vitepos WordPress plugin versions prior to 3.6.0 **Description** The point-of-sale password-reset API does not perform a per-target authorization check. Additionally, the custom Outlet Manager role is granted excessive password-reset capabilities by default. This allows a user with the Outlet Manager role to reset the password of any other user, including administrators, leading to full account takeover. **Recommendations** Update the vitepos WordPress plugin to version 3.6.0 or later.

**Name of the Vulnerable Software and Affected Versions** vitepos WordPress plugin versions prior to 3.6.0 **Description** An issue exists where an identifier from a REST request body is not sanitized or parameterized before being used in a database query within a report endpoint. This allows users with administrator-level access to perform SQL injection, a technique used to execute malicious SQL statements that can manipulate a database. **Recommendations** Update the plugin to version 3.6.0 or later.

**Name of the Vulnerable Software and Affected Versions** Cornerstone WordPress plugin versions prior to 7.8.9 **Description** The plugin fails to enforce capability checks on a REST API route, which allows any authenticated user to disclose metadata of other users. This exposed information includes user roles, session token previews, and stored billing or shipping fields. This issue specifically affects the premium Cornerstone page builder bundled with the X theme, and not the free version available on the .org repository. **Recommendations** Update to version 7.8.9 or later.

**Name of the Vulnerable Software and Affected Versions** Cornerstone WordPress plugin versions prior to 7.8.8 **Description** The premium Cornerstone page builder, bundled with the X theme, fails to enforce capability checks on a CSS-preview request handler. Additionally, the nonce required to call this handler is exposed to all logged-in users on any wp-admin page. This allows any authenticated user to evaluate dynamic content tokens against arbitrary users, leading to the disclosure of sensitive metadata, including raw password hashes. **Recommendations** Update the Cornerstone WordPress plugin to version 7.8.8 or later.

**Name of the Vulnerable Software and Affected Versions** Vitepos WordPress plugin versions prior to 3.4.2 **Description** The plugin fails to properly restrict the roles that can be assigned during the creation of new users through a REST API endpoint. This allows authenticated users with a custom role to escalate their privileges to the administrator level. **Recommendations** Update to version 3.4.2 or later.