← All credits
Emili Castells (Patchstack Alliance)
36 vulnerability records and advisories credit this contributor.
CVE-2023-46081
WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45072
WordPress Order auto complete for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-41664
WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability
CVE-2023-35910
WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection
CVE-2023-34385
WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload
CVE-2023-34381
WordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerability
CVE-2023-34170
WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-33216
WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32957
WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32962
WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)