Ananda Dhakal (Patchstack)

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability

WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object Injection vulnerability

WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability