WordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Modernize versions = 3.4.0...

WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Kalium versions = 3.18.3...

WordPress Savoy Theme <= 3.0.8 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Savoy versions = 3.0.8...

WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.3.11...

WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by Anhchangmutrang Patchstack Alliance in WordPress Plugin MapSVG versions 8.6.12...

WordPress The Plus Addons for Elementor Pro plugin < 6.3.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin The Plus Addons for Elementor Pro versions 6.3.7...

WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Ann Patchstack Alliance in WordPress Theme Traveler versions 3.2.2...

WordPress WooCommerce Product Multi-Action plugin <= 1.3 - Deserialization of untrusted data Vulnerability

Deserialization of untrusted data Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WooCommerce Product Multi-Action versions = 1.3...

WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Photography versions = 7.7.2...

WordPress Lesya <= 1.7.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Lesya versions = 1.7.2...

WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Cút lộn xào me Patchstack Alliance in WordPress Theme Course Builder versions 3.6.6...

WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Photography versions = 7.7.2...

WordPress Ruizarch <= 1.1.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Ruizarch versions = 1.1.0...

WordPress Samantha <= 1.1.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Samantha versions = 1.1.0...

WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Wilmër versions 3.4.2...

WordPress Luique <= 1.3.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Luique versions = 1.3.0...

WordPress Larson <= 1.5.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Larson versions = 1.5.0...

WordPress Kaffen <= 1.2.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Kaffen versions = 1.2.5...

WordPress ITSulu <= 1.4.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme ITSulu versions = 1.4.0...

WordPress Ashley <= 1.7.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Ashley versions = 1.7.0...