Rafie Muhammad (Patchstack)

WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability

WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability

WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability

WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability

WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability

WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability

WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability

WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability