Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
4 June, 2024
Insecure Direct Object Reference to Arbitrary Attachment Deletion vulnerability
4 June, 2024
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
15 December, 2023
Reflected CrossSite Scripting (XSS) vulnerability
4 July, 2019