Tiago Ventura

An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.

**Name of the Vulnerable Software and Affected Versions** Import and export users and customers plugin for WordPress versions prior to 2.4.1 **Description** Authenticated users with subscriber-level access and above can extract the `post title` and raw `post content` of arbitrary posts by enumerating post IDs. This exposure affects posts regardless of their status (draft, private, future, trash, password-protected) or post type, including non-public Custom Post Types (CPTs) such as internal CRM records and WooCommerce orders. The issue occurs via the `email template selected` parameter. The necessary `codection-security` nonce is exposed as inline JavaScript on any wp-admin page when `?post type=acui email template` is appended to the URL. **Recommendations** Update the plugin to a version newer than 2.4.0.

**Name of the Vulnerable Software and Affected Versions** WP User Frontend versions 4.3.7 and earlier **Description** An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. **Recommendations** Update WP User Frontend to a version later than 4.3.7.

**Name of the Vulnerable Software and Affected Versions** wpForo Forum versions prior to 3.0.7 **Description** A missing authorization issue in the wpForo Forum allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update to version 3.0.7 or later.

**Name of the Vulnerable Software and Affected Versions** Advanced Access Manager versions prior to 7.1.1 **Description** An authentication bypass by spoofing issue exists in the Advanced Access Manager plugin. This flaw allows the use of URL Encoding to bypass security controls. **Recommendations** Update to a version later than 7.1.0.

**Name of the Vulnerable Software and Affected Versions** Frontend Admin by DynamiApps versions prior to 3.29.3 **Description** An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can overwrite an administrator's profile fields, including `user pass`, `user email`, `first name`, and `last name`, by providing an arbitrary `user id` value. This allows for full administrator account takeover through direct password replacement or email-redirect password resets. This issue occurs when the Edit-User form has its 'Roles' configuration setting left empty; if a non-empty roles list is configured, the `load data()` function sets the user ID to 'none' for unauthorized users, preventing the targeting of administrators. **Recommendations** Update the plugin to a version later than 3.29.2. As a temporary mitigation, ensure the 'Roles' configuration setting in the Edit-User form is not left empty to prevent unauthorized users from targeting administrator accounts via the `load data()` function.