Seongwon Lee

The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range.

The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing users with a role as low as contributor to modify arbitrary WordPress options, which can be used to deactivate Notiqoo WordPress plugin before 1.4.14 and to lock every administrator out of the site.

**Name of the Vulnerable Software and Affected Versions** Animation Addons for Elementor versions prior to 2.7.2 **Description** Insufficient validation of user-supplied values allows unauthenticated users to manipulate the host of a server-side HTTP request. This enables the site to issue requests to internal hosts and read the responses back, a behavior known as Server-Side Request Forgery (SSRF), where an attacker induces the server to make requests to an unintended location. **Recommendations** Update Animation Addons for Elementor to version 2.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** ECS WordPress plugin versions prior to 4.3.8 **Description** Insufficient capability and ownership checks in dynamic repeater actions allow users with contributor-level accounts or higher to read, modify, and delete the binding configuration of posts they do not own. Additionally, these users can change site-wide presets. The system relies solely on a nonce, which is accessible to any user capable of opening the page builder. **Recommendations** Update ECS WordPress plugin to version 4.3.8 or later.