Betheme

Authenticated (Contributor+) Stored CrossSite Scripting vulnerability <= 28.0.3

Authenticated (Contributor+) Stored CrossSite Scripting via Custom JS vulnerability <= 27.6.1

Authenticated (Author+) Stored CrossSite Scripting via SVG File vulnerability <= 27.5.5

Authenticated (Contributor+) PHP Object Injection vulnerability <= 27.5.6

Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability <= 27.5.6