Apple released security updates across multiple platforms to address 10 vulnerabilities, including Bluetooth and AirPlay pairing flaws, iMessage group chat issues, and an exploited Brotli bug. Several Bluetooth and AirPlay flaws allow attackers within Bluetooth range or on the same network to bypass pairing code limits or pair without user interaction. Two iMessage vulnerabilities could allow unauthorized access to group chats or earlier conversations. The updates cover iOS, iPadOS, macOS, watchOS, and visionOS with specific fixes for certain devices. No exploitation in the wild has been reported for these Apple-specific vulnerabilities.
A vulnerability in the YITH WooCommerce Gift Cards WordPress plugin up to version 4.39.0 allows improper access control. The plugin issues gift cards credited with the item's pre-discount price rather than the actual amount paid, enabling customers to exploit store coupons and obtain gift cards worth more than their payment.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 contain a vulnerability where an unauthenticated user can access a REST API route that exposes detailed server, PHP, WordPress configuration, plugin versions, and the site administrator's email address. This exposure of sensitive information could aid attackers in further targeting the site.
Security For WooCommerce plugin versions up to 1.0.16 have a vulnerability where an unauthenticated REST API route exposes the email addresses of all site administrators. This exposure of sensitive information could aid attackers in reconnaissance but does not indicate direct system compromise.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 contains a missing authorization vulnerability that allows unauthenticated users to forcibly log out any user, including administrators, by sending logout requests without proper permission checks. This can disrupt user sessions and prevent legitimate users from accessing their accounts.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 contains a missing authorization vulnerability. This flaw allows unauthenticated users to trigger regeneration of secret keys and salts in the site's configuration file. Exploitation can forcibly log out all users and, on servers unable to reach the WordPress.org API, may corrupt the configuration file, potentially taking the entire site offline.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 lack proper authorization checks when resetting settings. This flaw allows unauthenticated users to reset configuration sections to defaults, disabling security features such as custom login URLs, two-factor authentication, reCAPTCHA, password policies, and the firewall.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 contains a missing authorization vulnerability. This flaw allows unauthenticated users to execute comment cleanup actions without proper permission checks, enabling them to permanently delete all site comments, including approved comments and WooCommerce order notes.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 contains a missing authorization vulnerability. This flaw allows unauthenticated users to trigger bulk plugin and WordPress core updates without proper permission checks. Exploitation could lead to forced installation of all pending updates on the affected site.
The Security For WooCommerce WordPress plugin up to version 1.0.16 contains a missing authorization vulnerability in one of its REST API routes. This flaw allows unauthenticated users to access the plugin's full settings, including sensitive information such as configured secret keys and the hidden login URL.
Security For WooCommerce WordPress plugin versions up to 1.0.16 have a missing authorization vulnerability that allows unauthenticated users to request and obtain a user's current two-factor authentication code or secret. This flaw enables bypassing the second factor on sites using the plugin's one-time password library.
The Security For WooCommerce WordPress plugin versions up to 1.0.16 contain a missing authorization vulnerability that allows unauthenticated users to reset two-factor authentication enrollment. This flaw enables attackers to remove the second factor from any user account or all accounts without proper permission.
Security For WooCommerce WordPress plugin versions up to 1.0.16 contain an improper privilege management vulnerability. Unauthenticated users can access certain REST API routes to generate and retrieve login tokens for any user, including administrators, allowing unauthorized login as those users.
A stored cross-site scripting (XSS) vulnerability exists in the Photo Engine (Media Organizer & Lightroom) WordPress plugin versions before 6.6.2. The plugin fails to properly sanitize and escape keyword names before storing and displaying them on its debugging page. This flaw allows users with Author role or higher to inject malicious scripts that execute in the context of administrators viewing the debugging page.
A vulnerability in the Photo Engine (Media Organizer & Lightroom) WordPress plugin before version 6.6.2 allows users with the Author role and above to delete media synced by other users, including administrators, without proper authorization checks.
ProfilePress WordPress plugin versions from 4.16.13 up to but not including 4.17.4 have a missing authorization check when changing an existing subscription via checkout. This flaw allows subscribers to subscribe to membership plans that the site owner has deactivated, including free plans that grant user roles. The issue is fixed in version 4.17.4.
A missing authorization vulnerability in the ProfilePress WordPress plugin before version 4.17.6 allows unauthenticated visitors to sign up for membership plans that administrators have deactivated. This occurs because negative membership plan identifiers are not properly rejected before checking plan activation status, enabling unauthorized role assignment.
ProfilePress WordPress plugin versions before 4.17.6 contain an improper access control vulnerability. This flaw allows unauthenticated users to bypass content protection rules when content is rendered outside the main query, enabling unauthorized reading of protected page content via the REST API. The issue is fixed in version 4.17.6.
A stored cross-site scripting (XSS) vulnerability exists in the Smoove abandoned cart trigger for WooCommerce WordPress plugin versions 4.0.0 up to but not including 4.3.6. The plugin fails to properly sanitize and escape abandoned-cart data submitted by visitors before displaying it in the admin dashboard. This allows unauthenticated users to inject malicious scripts that execute in the context of administrators viewing the dashboard.
A vulnerability in the Event Tickets and Registration WordPress plugin before version 5.30.3.1 allows unauthenticated users to access attendee data for private and non-public events. This occurs because the plugin does not properly restrict access to attendee information based on event visibility permissions.