Thies Lukas

**Name of the Vulnerable Software and Affected Versions** SIP Reviews Shortcode for WooCommerce plugin for WordPress versions up to, and including, 1.2.3 **Description** The issue is related to SQL Injection via the `no of reviews` attribute in the "woocommerce reviews" shortcode. This occurs due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries. This can be used to extract sensitive information from the database. **Recommendations** For versions up to, and including, 1.2.3, update to a version that fixes the SQL Injection issue. As a temporary workaround, consider restricting access to the `woocommerce reviews` shortcode to minimize the risk of exploitation. Avoid using the `no of reviews` attribute in the affected shortcode until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SIP Reviews Shortcode for WooCommerce plugin for WordPress versions up to, and including, 1.2.3 **Description** The issue is related to Stored Cross-Site Scripting via the `no of reviews` attribute in the "woocommerce reviews" shortcode. This is due to insufficient input sanitization and output escaping on user-supplied attributes, allowing authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages. These scripts will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 1.2.3, update to a version that addresses the insufficient input sanitization and output escaping issue. As a temporary workaround, consider restricting access to the `woocommerce reviews` shortcode or disabling the `no of reviews` attribute until a patch is available.

Name of the Vulnerable Software and Affected Versions: Revolut Gateway for WooCommerce plugin for WordPress versions up to, and including, 4.17.3 Description: The issue is related to unauthorized modification of data due to a missing capability check on the "/wc/v3/revolut" REST API endpoint. This allows unauthenticated attackers to mark orders as completed. Recommendations: For versions up to, and including, 4.17.3, update to a version higher than 4.17.3 to resolve the issue. As a temporary workaround, consider restricting access to the "/wc/v3/revolut" REST API endpoint until a patch is available.