Rafie Muhammad (Patchstack)

WordPress Preview E-mails for WooCommerce plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability

WordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Max Mega Menu plugin <= 3.3 - Broken Access Control vulnerability

WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability

WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection

WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to Cross Site Scripting (XSS)