Tieu Pham Trong Nhan

The issue is related to a missing capability check on the `wc4bp delete page()` function, allowing authenticated attackers with Subscriber-level access and above to update the plugin's page setting.

The issue is related to a missing capability check on the `wc4bp delete page()` function, allowing authenticated attackers with Subscriber-level access and above to update the plugin's page setting.

The issue concerns unauthorized modification of data or loss of data due to a missing capability check on the `update voucher price`, `update voucher date`, and `update voucher note` functions. This allows unauthenticated attackers to update the value, expiration date, and user note for any gift voucher.

The issue is related to a missing capability check on the `site ads files reset()` and `cls file reset()` functions. This allows unauthenticated attackers to reset the ad and cls files.

The issue allows authenticated attackers with Subscriber-level access and above to reset some of the plugin's settings due to a missing capability check on the `ajax deactivate()` function. This enables unauthorized modification of data.

The issue is related to unauthorized access of data due to a missing capability check on the `export db()` function. This allows unauthenticated attackers to retrieve a complete dump of the site's database.

The issue is related to a missing capability check in the `tmpcoder theme install func()` function, allowing authenticated attackers with Subscriber-level access and above to install a theme. This enables unauthorized access to the system.

The issue is related to a missing capability check on the `wpf delete file` function, allowing unauthenticated attackers to delete project pages and files. This results in unauthorized loss of data.

The issue allows authenticated attackers with Subscriber-level access and above to modify plugin settings or reset plugin widgets to their default state. This is due to a missing capability check on the `save options` and `reset widgets` functions.

The issue is a Stored Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping in the `rfbwp save settings()` function. This allows authenticated attackers with Subscriber-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The issue is related to privilege escalation via account takeover due to the plugin not properly validating a user's identity prior to updating their password through the `update user profile()` function. This allows unauthenticated attackers to change arbitrary user's passwords, including administrators, and gain access to their account.

The issue allows authenticated attackers with Subscriber-level access and above to update the plugin's settings due to a missing capability check on the `tweet settings save()` and `tweet settings update()` functions. This enables unauthorized modification of data.

The issue arises from a missing capability check on the 'wl config plugin' AJAX action, allowing unauthenticated attackers to update the plugin's settings. This enables unauthorized access to the plugin's configuration.

The issue is related to unauthorized access of data due to a missing capability check on the `export popup action()` function. This allows unauthenticated attackers to export popup templates.

The issue is related to unauthorized access of data due to a missing capability check on the `handle block shortcode export()` function. This allows authenticated attackers with Subscriber-level access and above to export shortcodes.

The issue is related to a missing capability check on the `sync libraries()` function, allowing authenticated attackers with Subscriber-level access and above to sync libraries. This enables unauthorized access to the plugin's functionality.

The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows authenticated attackers with author-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. When DirectoryPress Frontend is installed, this can be exploited by unauthenticated users.

The issue is due to a missing capability check on the `wcdn remove shoplogo` AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove the shop's logo.

The issue is related to unauthorized access of data due to a missing capability check on the `get layouts()` function. This allows authenticated attackers, with Subscriber-level access and above, to obtain a detailed listing of layout templates.

The issue is related to a missing capability check on the `install woocommerce plugin()` function action, allowing authenticated attackers with Subscriber-level access and above to install WooCommerce. This has a limited impact on most sites because WooCommerce is a requirement.