The Data Tables Generator by Supsystic WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in all versions up to and including 1.12.03. This vulnerability allows authenticated users with contributor-level access or higher to inject malicious scripts via the id attribute, which execute when other users view the affected pages. The issue arises from insufficient input sanitization and output escaping.
The Smart Popup by Supsystic WordPress plugin is vulnerable to SQL Injection via the 'sidx' parameter in versions up to and including 1.13.2. This vulnerability allows authenticated users with administrator-level privileges to inject additional SQL queries due to insufficient input escaping and lack of proper query preparation. The vulnerability has a medium severity rating with a CVSS score of 4.9.
The Data Tables Generator by Supsystic WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in the updateRows action that allows authenticated users with subscriber-level access or higher to inject malicious scripts via table cell data. This vulnerability affects all versions up to and including 1.15.1. Exploitation requires that an administrator has explicitly granted the subscriber role access to the plugin's 'access_roles' setting, enabling them to reach the vulnerable action handler. The vulnerability can lead to script execution in the context of users visiting the injected pages.
The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. An unauthenticated attacker can first call the 'updateNonce' action — which is accessible without authentication due to its absence from the plugin's permission list — to obtain a valid nonce, then submit a contact form with a malicious payload in a spoofed IP header such as X-Forwarded-For.
Smart Popup by Supsystic WordPress plugin versions up to 1.12.0 contain a privilege escalation vulnerability. This arises from improper permission management in the havePermissions() function, allowing unauthenticated attackers to create persistent administrator accounts by exploiting a nonce reuse and lack of server-side role restrictions. The vulnerability enables attackers to submit crafted POST requests to admin-ajax.php and escalate privileges to administrator.
The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to, and including, 1.7.36. This is due to the plugin using the Twig `Twig_Loader_String` template engine without sandboxing, combined with the `cfsPreFill` prefill functionality that allows unauthenticated users to inject arbitrary Twig expressions into form field values via GET parameters. This makes it possible for unauthenticated attackers to execute arbitrary PHP functions and OS commands on the server by leveraging Twig's `registerUndefinedFilterCallback()` method to register arbitrary PHP callbacks.
The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cleanCache() function in all versions up to, and including, 1.10.45. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29. This is due to missing or incorrect nonce validation on a saveAsCopy function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feature in all versions up to, and including, 1.11.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.