Authenticated (Subscriber+) Stored CrossSite Scripting via `mwai_chatbot` Shortcode `id` Parameter vulnerability
4 days ago
Insecure OAuth Implementation vulnerability
3 July, 2025
Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP vulnerability
19 June, 2025
Engine plugin < 2.6.5 Admin+ SQLi vulnerability
12 December, 2024
Admin+ SQLi vulnerability
13 September, 2024