These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd' parameter in all versions up to, and including, 2.8.61 due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts, which can be executed when an administrator views th [truncated]
The UsersWP plugin for WordPress has a vulnerability allowing authenticated attackers with Subscriber-level access to delete arbitrary files on the server. This is due to insufficient validation and normalization of user-supplied file paths. The vulnerability exists in versions up to and including 1.2.70 of the UsersWP plugin. An attacker can exploit this by providing a crafted file path that can be norma [truncated]
The UsersWP plugin for WordPress, specifically versions up to and including 1.2.69, is vulnerable to stored cross-site scripting via Badge Widget Variable Substitution. This vulnerability allows authenticated attackers with subscriber-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability is due to insufficient input s [truncated]
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via the getpaid_payment_form_element function. This makes it possible for authenticated attackers, with administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP co [truncated]
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This is due to insufficient validation of file-field values in the UsersWP_Validation::validate_fields() function combined with the UsersWP_Forms::upload_file_remove() AJAX handler building the deletion target without realpath canonicalization or uploads-directory boundary check.
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the 'user_id' parameter due to missing validation on a user controlled key. This vulnerability allows authenticated attackers, with editor-level access and above, to reset and permanentl [truncated]
The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.3.28. This is due to the ajax_ayi_action() handler only applying strip_tags(esc_sql()) — with no allow-list — to the attacker-controlled $_POST['type'] and $_POST['postid'] values before forwarding them to update_ayi_data(), which calls update_user_meta($current_user->ID, $rsvp [truncated]
