← All credits

Theodoros Malachias (Patchstack Alliance)

6 vulnerability records and advisories credit this contributor.

WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion

WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection

WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

WordPress AnsPress – Question and answer Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)

WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)