Yudistira Arya (Patchstack Alliance)

WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability

WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection

WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability

WordPress Mighty Addons for Elementor Plugin <= 1.9.3 is vulnerable to Cross Site Scripting (XSS)

WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection

WordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability

WordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection

WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection

WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)

WordPress Delhivery Logistics Courier Plugin <= 1.0.107 is vulnerable to SQL Injection