Tomasz Staszyszyn

**Name of the Vulnerable Software and Affected Versions** Kanban for WordPress Kanban Boards for WordPress plugin versions prior to 2.5.21 **Description** A Stored Cross-Site Scripting (XSS) vulnerability exists, allowing authentication bypass for admin+ users. **Recommendations** For versions prior to 2.5.21, update to version 2.5.21 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Cryptocurrency Widgets Pack Plugin versions <=1.8.1 **Description** The issue is related to an unauthorized SQL Injection vulnerability. This vulnerability affects the Cryptocurrency Widgets Pack Plugin on WordPress. **Recommendations** For versions <=1.8.1, update to a version higher than 1.8.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Easy WP SMTP plugin versions 1.5.1 and earlier **Description** The issue is related to an authenticated Remote Code Execution vulnerability. This allows for potential code execution on the server, which could lead to various malicious activities. **Recommendations** For versions 1.5.1 and earlier, update to a version later than 1.5.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Easy WP SMTP plugin versions 1.5.1 and earlier **Description** The issue is related to an Authenticated Path Traversal vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** For versions 1.5.1 and earlier, update to a version later than 1.5.1 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Easy WP SMTP plugin versions 1.5.1 and earlier **Description** The issue is related to an Authenticated Path Traversal vulnerability. This vulnerability affects the Easy WP SMTP plugin on WordPress. **Recommendations** For Easy WP SMTP plugin versions 1.5.1 and earlier, update to a version later than 1.5.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** S2W – Import Shopify to WooCommerce plugin version 1.1.12 and earlier **Description** The issue is related to an Arbitrary File Read vulnerability that affects users with admin+ authentication. This could potentially allow unauthorized access to sensitive files. **Recommendations** For S2W – Import Shopify to WooCommerce plugin version 1.1.12 and earlier, update to a version later than 1.1.12 to resolve the issue.