Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

*   Details
*   Reviews
*   Installation
*   Support
*   Development

Convert PNG images to JPG, free up web space and speed up your webpage

*   set quality of converted JPG
*   auto convert on upload
*   auto convert on upload only when PNG has no transparency
*   only convert image if JPG filesize is lower than PNG filesize
*   leave original PNG images on the server
*   convert existing PNG image to JPG
*   bulk convert existing PNG images to JPG
*   conversion statistics

1.  Upload png-to-jpg directory to the /wp-content/plugins/ directory
2.  Activate the plugin through the ‘Plugins’ menu in WordPress

Best work, fast speed when png convert to jpg

I had a client site where the developers used ALL PNG IMAGES and it was SLOW. Thank you for this awesome plugin you saved me a ton of time not having to convert manually & re-upload via GIMP!

Easy to use and efficient. The bulk convert page loads fast, the images were generated and replaced neatly. I saved over 80MB converting approximately 350 PNGs, and this was only a test run. Lovely plugin!

The plugin converts the format and replaces the address in the database well and without any problems. Be sure to back up before use to avoid problems

I used it on WordPress 5.7.1. The plugin does what it should do. Converting 200 images took about 3 minutes. I hope it will be updated soon. Using old plugins is always a bit scary.

Плагин нашел лишь малую часть моих PNG. Затем заменил полноразмерные png на jpg при этом они все исчезли из тех записей где стояли. Также (!) уменьшенные варианты этих же изображений ОН ОСТАВИЛ В ТОМ ЖЕ ФОРМАТЕ PNG. Таким образом были убиты самые большие PNG и больше ничего не изменилось. Я это делал птому что у меня есть backup сайта 🙂

Read all 32 reviews

“PNG to JPG” is open source software. The following people have contributed to this plugin.

Contributors

*    kubiq

**4.1**

*   added nonce and security checks
*   added button to stop transparency detection or conversion process
*   removed DB prefix from notice table names to make it more readable
*   remove preview box flex centering to make it works with bigger images
*   auto delete PNG backup when JPG deleted in admin

**4.0**

*   replace images also in post\_excerpt
*   separate SQL queries
*   added support for FV Player plugin

**3.9.1**

*   tested on WP 5.9
*   check if file really exists and if has .png extension

**3.9**

*   fix transparency default state

**3.8**

*   tested on WP 5.4
*   save transparency meta and load it instantly next time
*   image viewer – background switch
*   image viewer – centered image
*   image viewer – highlight image borders and show image size on hover

**3.7**

*   do not run second transparency detection if first one return true

**3.6**

*   metadata update fix

**3.5**

*   added support for Broken Link Checker plugin ( blc\_instances, blc\_links )

**3.4**

*   replace image url also in these database tables: yoast\_seo\_links, revslider\_static\_slides

**3.3**

*   tested on WP 5.2
*   handle duplicate names like WP – adding increment
*   optimizing code for faster processing

**3.2**

*   added support for Fancy Product Designer plugin

**3.1**

*   tested on WP 5.0
*   small cosmetic code changes

**3.0**

*   new option: convert only if JPG will have lower filesize then PNG
*   new feature: show converted images statistics
*   fix: conflict when there is already JPEG with a same name as PNG
*   fix: conflict when PNG name is part of another PNG name ( eg. ‘xyz.png’ can rename also ‘abcxyz.png’ )
*   optimized for translations

**2.6**

*   rename PNG image if JPG with the same name already exists

**2.5**

*   BUG FIXED – disabled checkboxes when autodetect is disabled

**2.4**

*   now you can disable autodetect PNG transparency

**2.3**

*   WP 4.9.1 compatibility check
*   new compatibility with Toolset Types

**2.2**

*   Repair revslider database table detection

**2.1**

*   Added option to leave original PNG image on server after conversion
*   Repair SQL replacement query

**2.0**

*   Replace image and thumbnails extension in database tables
*   Moved from Settings to Tools submenu
*   Some small fixes

**1.2**

*   Fix generating background for transparent images (thanks @darkcobalt)

**1.1**

*   Fix PNG transparency detection

**1.0**

*   First version

CVE-2022-29430: PNG to JPG

Cross-Site Scripting (XSS) vulnerability in Muneeb's WP Slider Plugin <= 1.4.5 at WordPress.

*   Details
*   Reviews
*   Support
*   Development

This plugin has been closed as of May 20, 2022 and is not available for download. This closure is temporary, pending a full review.

Installed plugin, added slides but I couldn't attach a photo to any of the slides. What gives?

Works as described, but you should also ask yourself whether you really need a slider. http://www.theseotailor.com.au/knowledge-base/do-i-need-a-slider/

The slider supports custom links for the images or slides. For instructions please visit the link below. https://wordpress.org/support/topic/linking-from-slides?replies=3 Captions are also support please visit the below for the instructions https://wordpress.org/support/topic/i-cant-visualize-description-in-caption-box?replies=5

Read all 37 reviews

“WP Slider Plugin” is open source software. The following people have contributed to this plugin.

Contributors

*    Muneeb

CVE-2022-29428: WP Slider Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Aftab Muni's Disable Right Click For WP plugin <= 1.1.6 at WordPress.

**disable-right-click-for-wp**

**Software**

**Disable Right Click For WP**

**Vulnerable Versions**

**<= 1.1.6**

**Fixed in version**

**CVE**

**CVE-2022-29427**

**References**

**Credits**

**Classification**

**Cross Site Request Forgery (CSRF)**

**OWASP Top 10**

**A5: Broken Access Control**

**Disclosure Date**

**2022-05-04**

**CVSS 3.0 score**

**Are your websites subject to this vulnerability?**

**Details**

**Cross-Site Request Forgery (CSRF) vulnerability discovered by Rasi Afeef (Patchstack Alliance) in WordPress Disable Right Click For WP plugin (versions <= 1.1.6).**

**Solution**

**No patched version is available. No reply from the vendor.**

**Found a vulnerability that puts your sites at risk?**

**Found a vulnerability? Help us secure the web and join our community of ethical hackers.**

**Are you the developer of this software? Hire our researchers for a thorough security audit.**

CVE-2022-29427: WordPress Disable Right Click For WP plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability - Patchstack

Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress.

**2j-slideshow**

**Software**

**Images Slideshow by 2J**

**Vulnerable Versions**

**<= 1.3.54**

**Fixed in version**

**CVE**

**CVE-2022-29426**

**References**

**Credits**

**Classification**

**Cross Site Scripting (XSS)**

**OWASP Top 10**

**A7: Cross-Site Scripting (XSS)**

**Disclosure Date**

**2022-05-04**

**CVSS 3.0 score**

**Requires contributor or higher role user authentication.**

**Are your websites subject to this vulnerability?**

**Details**

**Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered by Tien Nguyen Ahn aka vigov5 (Patchstack Alliance) in WordPress Slideshow, Image Slider by 2J plugin (versions <= 1.3.54).**

**Solution**

**No patched version is available. No reply from the vendor.**

**Found a vulnerability that puts your sites at risk?**

**Found a vulnerability? Help us secure the web and join our community of ethical hackers.**

**Are you the developer of this software? Hire our researchers for a thorough security audit.**

CVE-2022-29426: WordPress Slideshow, Image Slider by 2J plugin <= 1.3.54 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability - Patchstack

Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress.

*   Details
*   Reviews
*   Installation
*   Support
*   Development

**Description**

The Herd Effects is the free marketing tool to set and to post popup notifications on the site. The plugin serves to increase the conversion of web resource and motivate users to perform certain actions. It demonstrates the current or fictitious activity of other visitors and creates a “sense of live queue” effect.

The Herd Effects is a simple and effective solution to increase the conversion on the site. Using a WordPress plugin for social proof will allow you to demonstrate the activity of other users to visitors of the resource. The plugin forms a “herd effect”, attracts attention and motivates to commit various actions.

**Main features**

The Herd Effects will allow you to create a simple template and use it for an administrator-defined list of variable values. Notifications are designed to motivate the user to join the actions of others. Among its features:

*   configuring a template with variables to generate popup notification;
*   set the title;
*   more than 1400+ FontAwesome 5 icons ;
*   insert custom icons;
*   specifying the list of values for text variables;
*   set the minimum and maximum numeric values;
*   set the time interval for stable output of notifications;
*   edit the display on the screens less than the specified resolution;
*   insert an alert on the site using a shortcode.

**Quick Start video**

How to use and create a new social proof notification with Herd Effects plugin for WordPress.

**Pro version**

Enhance the “herd effect” of notifications by installing the Pro version of the plugin on your website:

*   unlimited amount of the notification sets;
*   generating an unlimited amount of the notifications in each set;
*   detailed adjustment of the style of the “herd effect” elements;
*   add a border and set the degree of rounding of its corners;
*   select a position to display each notification;
*   selection of colors for the background, borders, text and icons;
*   randomize the time intervals with which the notifications appear to add more realistic effect;
*   disabling a function of notifications closing by the user and setting auto-close;
*   control of the number of notifications;
*   add animation effects when windows appear and close;
*   connect and configure the output of the link via the notification;
*   display only for a specified period of time (from and to);
*   output of “herd effect” elements for all or separate user groups;
*   set the display depending on the language of the page;
*   edit the display of notifications on all or individual pages of the site, output items through the use of exceptions, IDs and categories.
*   And more…

Preview of Pro version

Buy Pro version

**Can be used for**

*   notification about registration on the site;
*   notifications with information on the purchase of goods;
*   informing visitors of the page about the ordering of the service by other users;
*   notifications about the installation of the application or program;
*   demonstration of the activity of users on the web resource;
*   notifications about subscription to the event of the company;
*   notifications about the mention of the resource in social networks;
*   informing users about real activity on the site and much more.

**Use with other plugins to maximize your results**

*   Popup Box – new WordPress popup plugin
*   Counter Box – powerful creator of counters, timers and countdowns
*   Button Generator – easily Button Builder
*   Herd Effects – fake notifications and social proof plugin
*   Floating Button
*   Side Menu Lite – add sticky fixed buttons
*   Sticky Buttons – floating buttons builder
*   Bubble Menu – circle floating menu
*   Float menu – awesome floating side menu
*   Modal Window – create modal window
*   Wow Skype Buttons
*   Border Menu
*   Slide Menu

**Support**

Search for answers and ask your questions at support center

**Screenshots**

**Installation**

*   Installation option 1: Find and install this plugin in the Plugins -> Add new section of your wp-admin
*   Installation option 2: Download the zip file, then upload the plugin via the wp-admin in the Plugins -> Add new section. Or unzip the archive and upload the folder to the plugins directory /wp-content/plugins/ via ftp
*   Press Activate when you have installed the plugin via dashboard or press Activate in the in the Plugins list
*   Go to Wow Herd Effects section that will appear in your main menu on the left
*   Click Add new to create your first set of notifications
*   Enter title that will appear in the notifications
*   Choose the icon that will appear in the notifications.
*   If you want a custom icon, tick Custom, upload your image via Media – Add new, then insert the link to your image. Recommended icon size is 60×60 pixels.
*   Construct your notifications template in the Text field.
*   Enter the values for your \[name\] and \[city\] variables. You can get the list of names and cities here. Note that you can use these variables for any kind of content, not just names and citites. Just enter any values you want and the plugin will randomly pick the values to be displayed in the notifications. Do not create new lines in the list of your variable, or the notifications will not work! Just enter the values, separated by comma.
*   Enter the minimum and maximum values of the Amount, if you are using it.
*   Click Save
*   Copy and paste the shortcode, such as \[Wow-Herd-Effects id=1\] to where you want the notifications to appear.
*   If you want the notifications to appear everywhere on your site, you can insert it in your header.php, like this: <?php echo do_shortcode('[Wow-Herd-Effects id=1]');?>
*   If you want to insert the shortcode into a widget, use this plugin

**Reviews**

Easy to use. No problems so far. Thanks for an amazing plugin.

Didn't work properly for me using the shortcode on one of my templates and it wasn't worth trying to fix it because the plugin is very restricted in the free version. Can't style it at all so you're left with a plain black look which is nothing but a distraction that looks very fake. Scarily I was putting it on my checkout page and recon this would have scared visitors off rather than pushed them towards the sale.

Why take the time and trouble to lie to those visiting your website when you could use a plugin to help? Herd Effects capitalizes on the emotional and brings out the worst in humanity to increase traffic to your website.

Steve August 31, 2020

This plugin works exactly as specified. It's the easiest to use of all plugins like this. The developer is extremely responsive and support is fantastic. I highly recommend using this plugin for your Herd Effects needs.

I installed and configured the plugin and it unconfigured all the banners on my homepage both on the desktop and on the mobile. Beautiful crap.

Read all 15 reviews

**Contributors & Developers**

“Herd Effects – fake notifications and social proof plugin” is open source software. The following people have contributed to this plugin.

Contributors

*    Wow-Company

**Changelog****5.2.1**

*   Fixed: security issue

**5.2**

*   Added: Export/Import functions
*   Fixed: minor bug

**5.1.3**

*   Fixed: minor bug

**5.1.2**

*   Fixed: minor bug

**5.1.1**

*   Fixed: script download queue

**5.1**

*   Updated: Font Awesome Icons to version 5.14
*   Fixed: minor bugs

**5.0.2**

*   Fixed: include script in footer

**5.0.1**

*   Fixed: custom image

**5.0**

*   Added: Live preview
*   Added: test mode option
*   Added: Unit for location
*   Updated: Admin style
*   Update: Font Awesome Icon to v. 5.12

**4.1**

*   Fixed: display of notification

**4.0.1**

*   Fixed: option ‘Show every (sec)’

**4.0**

*   Added: option for disabling FontAwesome 5 from front-end
*   Added: Content style options
*   Added: Title style options
*   Added: Icon style options
*   Added: Close button size option
*   Changed: Admin Style
*   Optimized: Styles and Scripts (minification and response time reduction)
*   Updated: FontAwesome 5
*   Fixed: Control on the devices

**3.1.3**

*   Fixed: Insert the shortcode

**3.1.2**

*   Fixed: Rounding the amount

**3.1.1**

*   Fixed: minor bugs
*   Fixed: main class

**3.1**

*   Fixed: minor bugs
*   Added: Support page
*   Added: Discount page

**3.0**

*   Added: function hiding menu on mobile
*   Changed: admin style
*   Changed: Up to 3 notifications

**2.3**

*   Fixed: minor bugs.
*   Change: Admin style.

**2.2**

*   Add: Interval display option.
*   Change: Admin style.

**2.1**

*   Fix: Can enter ‘Name’ and ‘City’ in new line.
*   Fix: Verifying access to the folder ‘asset’.
*   Fix: Optimized code.

**2.0**

*   Fixed code
*   Change style

**1.0**

*   Initial release

CVE-2022-29448: Herd Effects – fake notifications and social proof plugin

Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1 at WordPress.

**image-hover-effects-ultimate**

**Software**

**Image Hover Effects Ultimate**

**Vulnerable Versions**

**<= 9.7.1**

**Fixed in version**

**9.7.2**

**CVE**

**CVE-2022-29424**

**References**

**Credits**

**Classification**

**Cross Site Scripting (XSS)**

**OWASP Top 10**

**A7: Cross-Site Scripting (XSS)**

**Disclosure Date**

**2022-05-04**

**CVSS 3.0 score**

**Requires high role user authentication like admin.**

**Are your websites subject to this vulnerability?**

**Details**

**Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered by Nguy Minh Tuan (Patchstack Alliance) in WordPress Image Hover Effects Ultimate plugin (versions <= 9.7.1).**

**Solution**

**Update the WordPress Image Hover Effects Ultimate plugin to the latest available version (at least 9.7.2).**

**Found a vulnerability that puts your sites at risk?**

**Found a vulnerability? Help us secure the web and join our community of ethical hackers.**

**Are you the developer of this software? Hire our researchers for a thorough security audit.**

CVE-2022-29424: WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability - Patchstack

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.

CVE-2021-36833: MC4WP: Mailchimp for WordPress

Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress.

*   Details
*   Reviews
*   Installation
*   Support
*   Development

Checkout Files Upload for WooCommerce plugin lets your customers upload files on (or after) WooCommerce checkout.

**Features**

Set field’s **position** on WooCommerce checkout page:

*   Before checkout form.
*   After checkout form.
*   Do not add on checkout.

Set if file upload **is required**.

If you need files to be uploaded after order is created, you can optionally add field to:

*   WooCommerce **Thank You** (i.e. **Order Received**) page.
*   WooCommerce **My Account** page.

Add custom **label** to the field.

Set **accepted file types**.

Set custom Upload and Remove **button labels**.

Set **custom messages**:

*   “Wrong file type”.
*   “Wrong image dimensions” and “Couldn’t get image dimensions”.
*   “File is required”.
*   “File was successfully uploaded”.
*   “No file selected”.
*   “File was successfully removed”.

Optionally set field to show up only if in cart there are selected:

*   **Products**.
*   **Product categories**.
*   **Product tags**.

Add uploaded files to admin and customers **emails**.

Send **additional emails** if user uploads or removes files on “Thank You” or “My Account” pages.

**Customize** the frontend files upload form.

Optionally enable **AJAX form** for file uploads.

Set **max file size** option.

Optionally **validate image dimensions**.

**Feedback**

*   We are open to your suggestions and feedback. Thank you for using or trying out one of our plugins!
*   Drop us a line at www.wpwham.com.

**More**

*   Visit the Checkout Files Upload for WooCommerce plugin page.

1.  Upload the entire plugin folder to the /wp-content/plugins/ directory.
2.  Activate the plugin through the “Plugins” menu in WordPress.
3.  Start by visiting plugin settings at “WooCommerce > Settings > Checkout Files Upload”.

This plugin it might be very helpful if, for some reason, you have to let customers upload files during the checkout.

The free version of this plugin is just brilliant! The UI is very easy to understand, making it pretty straightforward to configure. We needed to have an upload field on the Checkout so customers could attach a PDF file. The file can be included as an actual email attachment, and not just a link. It also has the ability to include the upload field conditionally, meaning you can link it to a specific product on the backend, and it will just show if that product is in cart. I have tested multiple checkout upload plugins over the last few months. This is HANDS DOWN the BEST plugin of its kind on the market.

The free version of the plugin does much more than other paid plugins do. So many possibilities for customisation.

I have been facing a problem from three days on order at checkout file upload attachment not showing in mail .it was working fine before. kindly help me . https://fastprintamman.com/ palce a order and on check out there is file upload that attachment not showing in admin mail

Is it possible to set MINIMUM dimensions for both height and width? Also, the progress meter doesn't seem to actually reflect the upload progress... It just jumps to 100% almost immediately...

Read all 10 reviews

“Checkout Files Upload for WooCommerce” is open source software. The following people have contributed to this plugin.

Contributors

*    WP Wham

**2.1.3 – 2022-05-10**

*   FIX: escape filenames on order confirmation/thank you pages.

**2.1.2 – 2021-12-23**

*   FIX: potential XSS vulnerability (thanks to Vlad at Patchstack).
*   FIX: minor display bug in settings due to WooCommerce update.

**2.1.1 – 2021-09-16**

*   UPDATE: PHP 8 now officially supported.
*   UPDATE: updated .pot file for translations.

**2.1.0 – 2021-04-15**

*   NEW: added more options to “validate image dimensions” setting: “greater than or equal”, and “less than or equal”.
*   NEW: added button to delete file attachments on admin “edit order” page. (If you don’t want the ability to delete files, you can use the filter wpwham_checkout_files_upload_allow_admin_delete_files to disable it).
*   FIX: check if server’s temporary directory is writeable. If not, display an error message. (Solves an issue with 0-byte files being uploaded).
*   FIX: bug where sometimes 0-byte files were attached to order emails.
*   UPDATE: for text labels/notices, made it possible for a translated string to take precedence over stored settings. (Previously it was the other way around. This should now make things easier if you use a translation plugin like LocoTranslate, Polylang, etc).
*   UPDATE: performance improvement — load our admin assets only when needed.
*   UPDATE: updated .pot file for translations.

**2.0.4 – 2021-01-12**

*   FIX: clean output buffer before downloads (solves conflict with some 3rd-party plugins which interfere with the output buffer, causing downloads to appear as empty or corrupt).

**2.0.3 – 2020-09-17**

*   UPDATE: display our settings in WC status report.

**2.0.2 – 2020-08-21**

*   FIX: upload button translation issue (removed old label settings, added new ones).
*   UPDATE: updated .pot file for translations.

**2.0.1 – 2020-06-17**

*   FIX: issue with upload button not working in certain themes.
*   FIX: user permissions issue incorrectly preventing downloading of images from the WP admin side.
*   FIX: JS typo.

**2.0.0 – 2020-06-11**

*   NEW: **Breaking Change** the Form (simple) template has been removed, and Form (AJAX) is now the standard template. Form (AJAX) has been the default since v1.4.0 (2018-08-25), so for most people this change will have no effect. However, if you were using Form (simple), or if you had customized either template, please double check your settings to make sure things look correct. Or, you can reset the settings to get a fresh start.
*   NEW: **Breaking Change** in template settings, the variable %field_html% which previously contained BOTH the field html AND the upload button itself, has been split into separate variables %field_html% and %button_html%. Your template settings will be updated automatically to reflect this.
*   NEW: image thumbnails will be shown by default. The image feature has existed since v1.4.0 (2018-08-25), but some people didn’t realize this and/or didn’t know they needed to add %image% into the template to enable it. Now %image% is included in the template by default. If you don’t want this, simply edit your template settings and remove the %image% variable.
*   NEW: show spinner when processing, and prevent checkout form submission before upload is completed.
*   UPDATE: change the way we handle sessions — only start them when needed, not on every page load.
*   UPDATE: extensive code refactoring.
*   UPDATE: updated some styling and text. For example, progress bars (if enabled) are now green.
*   UPDATE: updated .pot file for translations.

**1.5.4 – 2020-01-14**

*   UPDATE: add new filters ‘wpw\_checkout\_files\_upload\_form\_html’ and ‘wpw\_checkout\_files\_upload\_form\_ajax\_html’.
*   UPDATE: wrap checkout page file upload controls in

<

div>.

**1.5.3 – 2019-11-22**

*   UPDATE: bump tested versions

**1.5.2 – 2019-11-15**

*   UPDATE: bump tested versions

**1.5.1 – 2019-09-12**

*   UPDATE: bump tested upto versions

**1.5.0 – 2018-10-08**

*   FIX: php notice
*   UPDATE: updated .pot file for translations

**1.4.5 – 2018-10-01**

*   Dev – [alg_wc_cfu_translate] shortcode added and do_shortcode() is now applied to each file’s “Labels”.

**1.4.4 – 2018-09-13**

*   Dev – Emails – “Additional Emails Options” subsection added.
*   Dev – “Raw” input is now allowed in all textarea admin settings fields.
*   Dev – Code refactoring – “Reset” function re-written.
*   Dev – Code refactoring – custom_number_checkout_files_upload settings type removed.
*   Dev – “Your settings have been saved” admin notice added.

**1.4.3 – 2018-09-10**

*   Dev – “Author URI” updated.

**1.4.2 – 2018-09-10**

*   Dev – “Contributors” updated.

**1.4.1 – 2018-08-27**

*   Fix – %image% in AJAX form fixed on “Thank you” and “My Account” pages.
*   Dev – “Validate image dimensions” options added for each file.
*   Dev – Minor code refactoring.
*   Dev – Minor admin settings restyling.

**1.4.0 – 2018-08-25**

*   Fix – User file download fixed on “Thank you” and “My Account” pages.
*   Dev – %image% replaced value added.
*   Dev – “AJAX form” now is enabled (yes) in settings by default.
*   Dev – Code refactoring.
*   Dev – Minor admin settings restyling.
*   Dev – Plugin URI updated.

**1.3.0 – 2018-06-09**

*   Fix – Case insensitive comparison of the “Accepted file types” options.
*   Fix – Default values fixed for all get_option() calls.
*   Dev – “AJAX form” options added.
*   Dev – “Max file size” options added.
*   Dev – Filter rewritten.
*   Dev – Admin settings – “Reset settings” section added.
*   Dev – Admin settings – Files settings added as separate sections.
*   Dev – Admin settings – Minor changes: restyling; select option type changed to wc-enhanced-select; settings array saved as main class property.

**1.2.0 – 2017-05-10**

*   Fix – Call to undefined function is_shop_manager() error fixed.
*   Dev – WooCommerce v3.x.x compatibility – Order ID – using function instead of accessing property directly.
*   Dev – load_plugin_textdomain moved to constructor from init hook.
*   Dev – Plugin link changed from http://coder.fm to https://wpcodefactory.com.

**1.1.1 – 2016-12-07**

*   Dev – alg_current_filter_priority() modified for compatibility with WordPress since v4.7.
*   Dev – Language (POT) file updated.
*   Dev – Checking for Pro modified.

**1.1.0 – 2016-11-28**

*   Dev – “Form Template Options” settings section added.
*   Dev – Language (POT) file added.
*   Dev – “Emails Options” settings moved to separate section.

**1.0.0 – 2016-09-05**

*   Initial Release.

CVE-2022-29425: Checkout Files Upload for WooCommerce

Users urged to update systems amid reports of active exploitation

Users urged to update systems amid reports of active exploitation

A critical vulnerability present among 90,000-plus active installations of the Jupiter WordPress theme allows for the takeover of target websites.

Although attackers must be authenticated to exploit the privilege escalation flaw, which has a CVSS score of 9.9, they only need to do so as a subscriber or customer. For websites that allow users to self-register, this offers little protection against potential attacks.

The bug, along with another, high severity vulnerability and a trio of medium severity flaws, has been patched by the theme’s developer, ArtBees, according to a blog post published on Wednesday (May 18) by Wordfence.

Read more of the latest WordPress security news

In a blog post published on Wednesday, ‘Plugin Vulnerabilities’ claimed to have seen evidence that hackers were already probing for vulnerable installations, and that some websites had likely already been hacked. 

**Bug breakdown**

The privilege escalation bug (CVE-2022-1654), which affects the Jupiter theme and JupiterX Core plugin, resides in the function.

Because vulnerable versions register AJAX actions but fail to perform capability or (cryptographic) nonce checks, “any logged-in user can elevate their privileges to those of an administrator by sending an AJAX request with the action parameter set to ,” explained Wordfence researcher Ram Gall, who uncovered the flaws.

“This calls the function, which calls the resetWordpressDatabase function, where the site is effectively reinstalled with the currently logged-in user as the new site owner”.

Moreover, “the same functionality can also be accessed by sending an AJAX request with the action parameter set to ”.

The high severity issue (CVSS score 8.1), an authenticated path traversal and local file inclusion issue, “could allow an attacker to obtain privileged information, such as nonce values, or perform restricted actions, by including and executing files from any location on the site”.

Tracked as CVE-2022-1657, the vulnerability affects the JupiterX and Jupiter themes.

The medium severity trio includes a pair of insufficient access control issues leading to authenticated arbitrary plugin deactivation, with one also leading to settings modification (CVE-2022-1656) and the other tracked as CVE-2022-1658. The third poses an information disclosure and modification, plus Denial of Service (DoS), issue (CVE-2022-1659).

**Updates**

Wordfence notified ArtBees of all but one of the flaws on April 5, 2022, and partially patched versions were released on April 28.

ArtBees was alerted to the final vulnerability on May 3 and released comprehensively patched versions on May 10.

The issues have been addressed in Jupiter Theme version 6.10.2, JupiterX theme version 2.0.7, and JupiterX Core version 2.0.8.

RECOMMENDED WordPress sites getting hacked ‘within seconds’ of TLS certificates being issued

WordPress theme Jupiter patches critical privilege escalation flaw

Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Opal Hotel Room Booking plugin <= 1.2.7 at WordPress.

**opal-hotel-room-booking**

**Software**

**Opal Hotel Room Booking**

**Vulnerable Versions**

**<= 1.2.7**

**Fixed in version**

**CVE**

**CVE-2022-29449**

**References**

**Credits**

**Classification**

**Cross Site Scripting (XSS)**

**OWASP Top 10**

**A7: Cross-Site Scripting (XSS)**

**Disclosure Date**

**2022-05-17**

**CVSS 3.0 score**

**Requires contributor or higher role user authentication.**

**Plugin does not exist, is not supported or discontinued.**

**Are your websites subject to this vulnerability?**

**Details**

**Stored Cross-Site Scripting (XSS) vulnerability discovered by Ngo Van Thien (Patchstack Alliance) in WordPress Opal Hotel Room Booking plugin (versions <= 1.2.7).**

**Solution**

**Deactivate and delete. No reply from the vendor.**

**Found a vulnerability that puts your sites at risk?**

**Found a vulnerability? Help us secure the web and join our community of ethical hackers.**

**Are you the developer of this software? Hire our researchers for a thorough security audit.**

Tag

#wordpress