The Keep Backup Daily plugin for WordPress before version 2.1.4 has a sensitive information exposure vulnerability. This vulnerability allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed `kbd_cron_process` parameter without authentication. The dump filename, though partially predictable based on the database name, a limited random range, and the current [truncated]
A Missing Authorization vulnerability exists in the Stock Locations for WooCommerce plugin, allowing for Exploiting Incorrectly Configured Access Control Security Levels. The plugin's version range from n/a through <= 3.1.8 is affected. This issue may impact users of the plugin, particularly those with incorrectly configured access control security levels. Users should verify their installations and updat [truncated]
A Missing Authorization vulnerability in Fahad Mahmood's RSS Feed Widget plugin for WordPress, versions up to and including 3.0.2, allows attackers to exploit incorrectly configured access control security levels. This issue has a CVSS score of 5.4 and is considered medium severity. The vulnerability could lead to potential unauthorized actions due to incorrectly configured access control, emphasizing the [truncated]
