Vulnerability history
0 present
27 patched
Authenticated (Administrator+) SQL Injection via `order_by` Parameter vulnerability
7.6
18 July, 2025
Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion vulnerability
7.5
1 July, 2025
Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion vulnerability
8.6
1 July, 2025
Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via id and datasize Parameters vulnerability
6.5
5 June, 2025
Order Replay vulnerability
5.3
17 April, 2025
