Wackydawg

**Name of the Vulnerable Software and Affected Versions** LoginPress Pro versions prior to 6.2.3 **Description** An issue exists in the LoginPress Pro plugin for WordPress that allows unauthenticated attackers to perform privilege escalation, enabling them to elevate their access levels within the system. **Recommendations** Update LoginPress Pro to version 6.2.3 or later.

**Name of the Vulnerable Software and Affected Versions** CBX 5 Star Rating & Review versions prior to 1.0.8 **Description** The CBX 5 Star Rating & Review plugin for WordPress is subject to Reflected Cross-Site Scripting (XSS), a flaw where an application includes untrusted data in a web page without proper validation. This occurs due to insufficient input sanitization and output escaping in the `page` parameter. Unauthenticated attackers can exploit this by injecting arbitrary web scripts into pages, which execute when an administrator is tricked into clicking a malicious link. **Recommendations** Update the plugin to a version later than 1.0.7. As a temporary workaround, restrict or monitor the use of the `page` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** VatanSMS WP SMS versions prior to 1.02 **Description** The VatanSMS WP SMS plugin for WordPress contains a Reflected Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute if an administrator is tricked into clicking a malicious link. The issue is triggered via the `page` parameter. **Recommendations** Update to a version later than 1.01. As a temporary workaround, restrict or sanitize the input received by the `page` parameter to prevent the execution of arbitrary scripts.

**Name of the Vulnerable Software and Affected Versions** wpForo Forum versions prior to 3.0.6 **Description** The plugin is subject to arbitrary file deletion. This occurs because the `Members::update()` method fails to validate or restrict values for file-type custom profile fields, enabling authenticated users to store arbitrary paths. Additionally, the `wpforo fix upload dir()` sanitization function within `ucf file delete()` only remaps paths matching a specific pattern before they are passed to the `unlink()` function. Authenticated attackers with subscriber-level access or higher can exploit this to delete arbitrary files on the server, which may lead to remote code execution if critical files like 'wp-config.php' are removed. This issue requires the wpForo - User Custom Fields addon plugin to be active. **Recommendations** Update to a version newer than 3.0.5.

**Name of the Vulnerable Software and Affected Versions** Migrate Posts versions from n/a through 1.0 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. **Recommendations** For versions from n/a through 1.0, update to a version that fixes the Improper Neutralization of Input During Web Page Generation issue to prevent Reflected XSS attacks.