Emili Castells (Patchstack Alliance)

WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection

WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability

WordPress Annual Archive plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

WordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerability

WordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability

WordPress Frontend Dashboard plugin <= 2.2.2 - Sensitive Data Exposure on PII vulnerability

WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability

WordPress MyRewards plugin <= 5.3.0 - Broken Access Control vulnerability

WordPress WholesaleX plugin <= 1.3.1 - Broken Access Control vulnerability

WordPress WholesaleX plugin <= 1.3.1 - Sensitive Data Exposure on User Export vulnerability