Yudistira Arya (Patchstack Alliance)

WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability

WordPress FG Joomla to Wordpress plugin <= 4.20.2 - Sensitive Data Exposure via Log File vulnerability

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability

WordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability

WordPress EnvíaloSimple plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Import Content in WordPress & WooCommerce with Excel plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability

WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

WordPress WP Poll Maker plugin <= 3.4 - Authenticated Arbitrary File Upload vulnerability