Rafie Muhammad (Patchstack)

WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection

WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability

WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability

WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability

WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability

WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability

WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability

WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)

WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)

Broken Access Control vulnerability in multiple Brainstorm Force plugins