Critical SureTriggers Plugin Vulnerability Exploited within 4 hours
If you are a Patchstack customer, you are protected from this vulnerability already, and no further action is required from [...]
Blog
Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites
WP Ghost Local File Inclusion to RCE This blog post is about the WP Ghost plugin vulnerability. If you’re a [...]
Arbitrary File Upload Vulnerability Patched in Chaty Pro Plugin
Chaty Pro Unauthenticated Arbitrary File Upload This blog post discusses about the findings on the Chaty Pro plugin. This vulnerability [...]
Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites
Essential Addons for Elementor Reflected Cross Site Scripting This blog post is about the Essential Addons for Elementor plugin vulnerability. [...]
Critical Privilege Escalation Patched in KLEO Theme’s Plugin
K Elements Privilege Escalation This blog post is about the K Elements plugin vulnerability. If you’re a KLEO theme user [...]
Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites
Admin and Site Enhancements (ASE) Privilege Escalation Admin and Site Enhancements (ASE) Pro Privilege Escalation This blog post is about [...]
Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin
Better Find and Replace Privilege Escalation Vulnerability This blog post is about the Better Find and Replace plugin vulnerability. If [...]
Privilege Escalation Vulnerability Patched in RealHome Theme
Easy Real Estate Plugin Unauthenticated Privilege Escalation This blog post discusses about the findings on the RealHome theme and the [...]
Critical Vulnerability Patched in GiveWP Plugin
GiveWP Unauthenticated PHP Object Injection The vulnerability in the GiveWP plugin was originally reported by Patchstack Alliance community member Edisc [...]
Critical Vulnerabilities Found in Fancy Product Designer Plugin
Fancy Product Designer Unauthenticated Arbitrary File Upload Fancy Product Designer Unauthenticated SQL Injection This blog post is about Fancy Product [...]
Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins
WPLMS Unauthenticated Arbitrary File Upload WPLMS Subscriber+ Arbitrary File Upload WPLMS Sutedent+ Arbitrary File Upload WPLMS Unauthenticated Privilege Escalation WPLMS [...]
Multiple Critical Vulnerabilities Patched in Woffice Theme
Woffice Theme Unauthenticated Privilege Escalation Woffice Theme Unauthenticated Broken Authentication This blog post is about the Woffice theme vulnerabilities. If [...]