Tran Nguyen Bao Khanh

**Name of the Vulnerable Software and Affected Versions** Mane theme for WordPress versions prior to 1.8 **Description** The Mane theme for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, which can lead to the execution of PHP code. This issue may be leveraged to bypass access controls, retrieve sensitive data, or achieve remote code execution if the attacker can upload files, such as images, that are then included by the system. **Recommendations** Update the Mane theme to version 1.8 or later.

**Name of the Vulnerable Software and Affected Versions** Total Donations versions prior to 2.0.6 **Description** The Total Donations plugin for WordPress contains a flaw that allows unauthenticated attackers to perform SQL Injection. This occurs because the software fails to properly escape user-supplied parameters and lacks sufficient preparation of SQL queries. Consequently, an attacker can append malicious SQL queries to existing ones to extract sensitive information from the database. **Recommendations** Update the plugin to a version newer than 2.0.5.

**Name of the Vulnerable Software and Affected Versions** Verdure Core versions prior to 1.3 **Description** The Verdure Core plugin for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, enabling the execution of PHP code within those files. This issue can be leveraged to bypass access controls, retrieve sensitive data, or achieve remote code execution if images or other safe file types can be uploaded and subsequently included. **Recommendations** Update the plugin to a version later than 1.2.

**Name of the Vulnerable Software and Affected Versions** Jawn versions prior to 1.4.3 **Description** An issue exists that allows unauthenticated attackers to elevate their privileges to those of an administrator. **Recommendations** Update Jawn to a version newer than 1.4.2.

**Name of the Vulnerable Software and Affected Versions** Zegen versions prior to 1.2.0 **Description** Zegen - Church WordPress Theme allows authenticated attackers with Subscriber-level access and above to upload arbitrary files to the server. This issue occurs due to missing file type validation, which could potentially lead to remote code execution. **Recommendations** Update Zegen to version 1.2.0 or later.

**Name of the Vulnerable Software and Affected Versions** Audrey versions prior to 1.6 **Description** Unauthenticated attackers can perform Local File Inclusion, which allows the inclusion and execution of arbitrary files on the server. This issue enables the execution of PHP code contained within those files, potentially leading to the bypass of access controls or the retrieval of sensitive data. This can occur if images or other safe file types are uploaded and subsequently included. **Recommendations** Update to a version newer than 1.5.

**Name of the Vulnerable Software and Affected Versions** NanoMag versions prior to 1.9 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a user accesses the affected page. **Recommendations** Update to a version newer than 1.8.

**Name of the Vulnerable Software and Affected Versions** WP eMember versions prior to 10.9.4 **Description** The WP eMember plugin for WordPress contains a flaw allowing unauthenticated attackers to perform SQL Injection. This occurs due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query, enabling the execution of additional queries to extract sensitive information from the database. **Recommendations** Update to version 10.9.4 or later.

**Name of the Vulnerable Software and Affected Versions** WP eMember versions prior to 10.2.3 **Description** An issue in the software allows the retrieval of embedded sensitive system information by an unauthorized control sphere. **Recommendations** Update to a version later than 10.2.2.

**Name of the Vulnerable Software and Affected Versions** AI Lab versions prior to 5.4.2 **Description** The AI Lab theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection occurs when an application deserializes data from an untrusted source, potentially allowing an attacker to manipulate the object's properties. While no POP chain is present in the software itself, the presence of a POP chain via another installed plugin or theme could enable the deletion of arbitrary files, retrieval of sensitive data, or remote code execution. **Recommendations** Update to version 5.4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Kapee versions prior to 1.7.1 **Description** Stored Cross-Site Scripting (XSS) occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a user accesses the affected page. **Recommendations** Update to version 1.7.1 or later.

**Name of the Vulnerable Software and Affected Versions** Solene Core versions prior to 2.3.3 **Description** An unauthenticated Local File Inclusion issue exists in the Solene Core plugin for WordPress. This flaw allows remote attackers to include and execute arbitrary files on the server, which can lead to the execution of PHP code contained within those files. This can be leveraged to bypass access controls or obtain sensitive data, particularly when images or other seemingly safe file types are uploaded and subsequently included. **Recommendations** Update Solene Core to a version newer than 2.3.2.

**Name of the Vulnerable Software and Affected Versions** Malmö versions prior to 2.3 **Description** The Malmö theme for WordPress allows unauthenticated attackers to perform Local File Inclusion, a process where an application includes a file more broadly than intended. This allows the inclusion and execution of arbitrary files on the server, enabling the execution of PHP code contained within those files. This flaw can be used to bypass access controls or obtain sensitive data, particularly when images or other safe file types can be uploaded and subsequently included. **Recommendations** Update to a version newer than 2.2.

**Name of the Vulnerable Software and Affected Versions** Mr. SEO versions prior to 2.1 **Description** The Mr. SEO theme for WordPress allows unauthenticated attackers to perform Local File Inclusion, a process where an application includes a file more broadly than intended. This allows the inclusion and execution of arbitrary files on the server, enabling the execution of any PHP code contained within those files. This flaw can be used to bypass access controls or obtain sensitive data, particularly when images or other safe file types are uploaded and subsequently included. **Recommendations** Update to a version newer than 2.0.

**Name of the Vulnerable Software and Affected Versions** Hitek versions prior to 1.8.3 **Description** The Hitek theme for WordPress allows unauthenticated attackers to include and execute arbitrary files on the server. This issue enables the execution of PHP code contained within those files, which can be leveraged to bypass access controls or obtain sensitive data. This is particularly critical when images or other seemingly safe file types can be uploaded and subsequently included. **Recommendations** Update to version 1.8.3 or later.

**Name of the Vulnerable Software and Affected Versions** Solene versions prior to 3.5 **Description** The Solene theme for WordPress allows unauthenticated attackers to perform Local File Inclusion, a process where an application includes a file more broadly than intended. This allows the inclusion and execution of arbitrary files on the server, enabling the execution of PHP code contained within those files. This flaw can be used to bypass access controls or obtain sensitive data, particularly when images or other safe file types are uploaded and subsequently included. **Recommendations** Update Solene to a version newer than 3.4.

**Name of the Vulnerable Software and Affected Versions** Aperitif versions prior to 1.6 **Description** The Aperitif theme for WordPress allows unauthenticated attackers to perform Local File Inclusion, a process where an application includes a file more broadly than intended. This allows the inclusion and execution of arbitrary files on the server, enabling the execution of PHP code contained within those files. This flaw can be used to bypass access controls or obtain sensitive data, particularly when images or other safe file types are uploaded and subsequently included. **Recommendations** Update to a version newer than 1.5.

**Name of the Vulnerable Software and Affected Versions** ThemeREX Melania versions through 2.5.0 **Description** The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. The issue affects the software's handling of file inclusion, potentially allowing an attacker to include arbitrary local files. **Recommendations** Update ThemeREX Melania to a version later than 2.5.0.

**Name of the Vulnerable Software and Affected Versions** Ovatheme Tripgo versions prior to 1.5.6 **Description** The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for unauthorized access to local files within the system. **Recommendations** Update Ovatheme Tripgo to version 1.5.6 or later.

**Name of the Vulnerable Software and Affected Versions** WP eMember versions through 10.2.2 **Description** A missing authorization issue exists in Tips and Tricks HQ WP eMember, stemming from incorrectly configured access control security levels. This allows for unauthorized access. **Recommendations** Update WP eMember to a version newer than 10.2.2.