Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
6 December, 2024
Authenticated (Subscriber+) Stored CrossSite Scripting via SVG File Upload vulnerability
19 August, 2024
Open Redirect vulnerability
30 April, 2024
Broken Access Control vulnerability
22 April, 2024
Directory Traversal via XFILENAME vulnerability
8 April, 2024