Dave Jong (Patchstack)

WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection

Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes

WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability

WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation

WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection

WordPress Editorialmag theme <= 1.1.9 - Authenticated Arbitrary Plugin Activation

Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes

WordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS)

WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection