Vulnerability history
0 present
6 patched
2.8.4 Missing Authorization to Authenticated (Subscriber+) Limited Options Update
8.1
30 April, 2025
Contributor+ Stored XSS vulnerability
6.3
10 January, 2023
CrossSite Request Forgery (CSRF) vulnerability
5.4
13 October, 2022
Unauthenticated Plugin Settings Change Vulnerability
8.2
22 February, 2022
Unauthenticated SQL Injection (SQLi) vulnerability
7.3
1 February, 2022
