Rafie Muhammad (Patchstack)

WordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerability

WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability

WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability

WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability

WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability

WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability

WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability