Authenticated (Contributor+) Stored CrossSite Scripting via file_modified Shortcode vulnerability
10 October, 2025
Reflected Cross Site Scripting (XSS) vulnerability
1 April, 2025
Reflected CrossSite Scripting vulnerability
14 December, 2023
Authenticated(Editor+) PHP Object Injection vulnerability
15 September, 2023
Author+ Arbitrary File Upload Vulnerability
18 January, 2023