Rafie Muhammad | Patchstack Bug Bounty Program

WordPress RomethemeKit For Elementor plugin <= 1.5.4 - Arbitrary Plugin Installation/Activation to RCE vulnerability

WordPress FS Poster plugin <= 6.5.8 - SQL Injection vulnerability

WordPress Ark Theme Core plugin < 1.71.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability

WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability

WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability

WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability

WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability