Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
29 August, 2024
Authenticated (Contributor+) Stored CrossSite Scripting via sonaar_audioplayer Shortcode vulnerability
10 July, 2024
Arbitrary File Download vulnerability
5 April, 2024
Cross Site Scripting (XSS) vulnerability
29 March, 2024
Broken Access Control vulnerability
28 March, 2024