Vulnerability history
0 present
18 patched
Remote Code Execution (RCE) vulnerability
9.1
1 November, 2024
Authenticated (Author+) Arbitrary File Upload via mlainlineedituploadscripts AJAX Action vulnerability
9.1
13 August, 2024
Reflected CrossSite Scripting vulnerability
7.1
2 July, 2024
Authenticated SQL Injection vulnerability
8.5
19 June, 2024
Authenticated (Contributor+) SQL Injection via Shortcode vulnerability
8.5
22 May, 2024
