Toms

**Name of the Vulnerable Software and Affected Versions** Bill Minozzi WP Tools versions 3.41 and earlier **Description** A Missing Authorization issue affects the software, potentially allowing unauthorized access. The estimated number of affected devices and real-world incidents are not specified. **Recommendations** For Bill Minozzi WP Tools versions 3.41 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kanban Boards for WordPress versions 2.5.21 and earlier **Description** The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection'. This allows for the injection of malicious code, potentially leading to unauthorized access or control. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For versions 2.5.21 and earlier, update to a version later than 2.5.21 to resolve the issue. At the moment, there is no information about other mitigation measures.

**Name of the Vulnerable Software and Affected Versions** BSK Forms Blacklist versions 3.6.2 and earlier **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL code. **Recommendations** For versions 3.6.2 and earlier, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress versions n/a through 7.1.1 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions n/a through 7.1.1, update to a version later than 7.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the SQL database to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Kanban for WordPress Kanban Boards for WordPress plugin versions prior to 2.5.21 **Description** A Stored Cross-Site Scripting (XSS) vulnerability exists, allowing authentication bypass for admin+ users. **Recommendations** For versions prior to 2.5.21, update to version 2.5.21 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Cryptocurrency Widgets Pack Plugin versions <=1.8.1 **Description** The issue is related to an unauthorized SQL Injection vulnerability. This vulnerability affects the Cryptocurrency Widgets Pack Plugin on WordPress. **Recommendations** For versions <=1.8.1, update to a version higher than 1.8.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Easy WP SMTP plugin versions 1.5.1 and earlier **Description** The issue is related to an authenticated Remote Code Execution vulnerability. This allows for potential code execution on the server, which could lead to various malicious activities. **Recommendations** For versions 1.5.1 and earlier, update to a version later than 1.5.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Easy WP SMTP plugin versions 1.5.1 and earlier **Description** The issue is related to an Authenticated Path Traversal vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** For versions 1.5.1 and earlier, update to a version later than 1.5.1 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Easy WP SMTP plugin versions 1.5.1 and earlier **Description** The issue is related to an Authenticated Path Traversal vulnerability. This vulnerability affects the Easy WP SMTP plugin on WordPress. **Recommendations** For Easy WP SMTP plugin versions 1.5.1 and earlier, update to a version later than 1.5.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** S2W – Import Shopify to WooCommerce plugin version 1.1.12 and earlier **Description** The issue is related to an Arbitrary File Read vulnerability that affects users with admin+ authentication. This could potentially allow unauthorized access to sensitive files. **Recommendations** For S2W – Import Shopify to WooCommerce plugin version 1.1.12 and earlier, update to a version later than 1.1.12 to resolve the issue.