Trương Hữu Phúc

An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database, potentially allowing them to view data they are not normally able to retrieve.

The Contest Gallery plugin for WordPress contains a SQL Injection flaw caused by insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. Authenticated attackers with contributor-level access or higher can append malicious SQL queries to existing ones to extract sensitive information from the database.

A missing authorization issue in the Prasad Kirpekar WP Meta and Date Remover plugin allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify if a user has the necessary permissions to perform an action.

A missing authorization issue in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows for the exploitation of incorrectly configured access control security levels.

A flaw exists in Stylemix uListing that allows for Path Traversal. This issue is due to improper limitation of a pathname to a restricted directory.

A flaw exists in the code generation process of ILLID Advanced Woo Labels, allowing for remote code inclusion. The issue is due to improper control of code generation, which can lead to code injection.

An issue exists in scripteo Ads Pro ap-plugin-scripteo related to incorrectly configured access control security levels, allowing for missing authorization.

An issue exists in raratheme The Minimal related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these levels.

An issue exists in Travel Diaries related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of access control.

A missing authorization issue exists in the raratheme App Landing Page application. This allows exploitation of incorrectly configured access control security levels. The issue concerns the `app-landing-page` component.

An issue exists in raratheme Spa and Salon spa-and-salon related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of access control.

A missing authorization issue exists in raratheme Digital Download’s digital-download functionality. This allows exploitation of incorrectly configured access control security levels. The issue concerns the control of access to resources within the application.

A missing authorization issue exists in Rara Academic, allowing exploitation of incorrectly configured access control security levels.

An issue exists in raratheme Influencer that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. The vulnerability is a missing authorization flaw.

An authorization issue exists in raratheme Elegant Pink, allowing exploitation of incorrectly configured access control security levels.

An authorization issue exists in raratheme Numinous that allows exploitation of incorrectly configured access control security levels. The issue relates to missing authorization checks, potentially allowing unauthorized access to resources.

An authorization issue exists in raratheme Kalon. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.

An issue exists in Pranayama Yoga that relates to incorrectly configured access control security levels, potentially allowing unauthorized access.

An authorization issue exists in raratheme Ridhi, allowing exploitation of incorrectly configured access control security levels. The issue relates to missing authorization checks, potentially allowing unauthorized access to resources or functionality.

An authorization issue exists in alttextai Download Alt Text AI. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.