Ananda Dhakal (Patchstack)

WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability

WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

WordPress ووسلام – همگام سازی ووکامرس و باسلام plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

WordPress گرویتی فرم فارسی plugin <= 3.0.2 - SQL Injection vulnerability

WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin <= 1.8.21 - Broken Access Control vulnerability

WordPress Real Testimonials plugin <= 3.1.15 - PHP Object Injection vulnerability

WordPress Houzez Login Register plugin <= 3.3.3 - Privilege Escalation vulnerability

WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability

WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability