Emili Castells

Twitter Github Website

5 May, 2023

Alliance XP

97.97

Total reports

Reports, last 90 days

Contributions 25

Achievements Soon

Report WordPress vulnerabilities, earn prizes and become an Alliance member!

Join Patchstack Alliance

Plugin

Team Members Showcase <= 1.3.4 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

8 November, 2023

Plugin

WooCommerce Product Enquiry <= 2.3.4 Cross Site Scripting (XSS) vulnerability

+14.2 AXP

7.1

8 November, 2023

Plugin

Live Gold Price & Silver Price Charts Widgets <= 2.4 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

7 November, 2023

Plugin

Product Visibility by Country for WooCommerce <= 1.4.9 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

7 November, 2023

Plugin

Lava Directory Manager <= 1.1.34 Contributor+ stored Cross Site Scripting (XSS) vulnerability

+4.88 AXP

6.5

7 November, 2023

Plugin

Extra Product Options for WooCommerce <= 3.0.3 Cross Site Scripting (XSS) vulnerability

+1.48 AXP

5.9

7 November, 2023

Plugin

Direct Checkout – Quick View – Buy Now For WooCommerce <= 1.5.8 Cross Site Scripting (XSS) vulnerability

+1.48 AXP

5.9

7 November, 2023

Plugin

TWB Woocommerce Reviews <= 1.7.5 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

7 November, 2023

Plugin

Recently viewed and most viewed products <= 1.1.1 Cross Site Scripting (XSS) vulnerability

+1.48 AXP

5.9

7 November, 2023

Plugin

IdeaPush <= 8.52 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

31 October, 2023

Plugin

Simple User Listing <= 1.9.2 Reflected Cross Site Scripting (XSS) vulnerability

+14.2 AXP

7.1

25 October, 2023

Plugin

Eonet Manual User Approve <= 2.1.3 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

19 October, 2023

Plugin

Lava Directory Manager <= 1.1.34 Unauth stored Cross Site Scripting (XSS) vulnerability

+14.2 AXP

7.1

16 October, 2023

Plugin

Contact Form Generator <= 2.6.0 SQL Injection vulnerability

+9.56 AXP

8.5

9 October, 2023

Plugin

Order auto complete for WooCommerce <= 1.2.0 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

3 October, 2023

Plugin

Export Import Menus <= 1.8.0 Arbitrary File Upload vulnerability

+14.85 AXP

9.9

4 September, 2023

Plugin

Easy Newsletter Signups <= 1.0.4 Broken Access Control vulnerability

+0 AXP

6.5

1 September, 2023

Plugin

Quasar form <= 6.0 SQL Injection vulnerability

+9.56 AXP

8.5

24 July, 2023

Plugin

Zippy <= 1.6.2 Broken Access Control vulnerability

+10.6 AXP

5.3

12 July, 2023

Plugin

GDPR Cookie Consent Notice Box <= 1.1.6 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

2 June, 2023

Plugin

Quick/Bulk Order Form for WooCommerce <= 3.5.7 Cross Site Scripting (XSS) vulnerability

+1.48 AXP

5.9

30 May, 2023

Plugin

Novelist <= 1.2.0 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

22 May, 2023

Plugin

WooDiscuz – WooCommerce Comments <= 2.2.9 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

19 May, 2023

Plugin

WishSuite <= 1.3.4 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

18 May, 2023

Plugin

Product page shipping calculator for WooCommerce <= 1.3.25 Cross Site Scripting (XSS) vulnerability

+0 AXP

5.9

12 May, 2023

Include pending

Emili Castells

Anonymous Guy

Solutions

WordPress security

Patchstack

Social

Solutions

WordPress security

Patchstack

Social

Emili Castells

Anonymous Guy

Solutions

WordPress security

Patchstack

Social

Solutions

WordPress security

Patchstack

Social

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!