Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability
16 March, 2022
Authenticated Arbitrary File Upload vulnerability
10 February, 2021
CrossSite Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability
10 February, 2021
CrossSite Request Forgery (CSRF) leading to Setting Modification vulnerability
10 February, 2021
CrossSite Request Forgery (CSRF) and CrossSite Scripting (XSS) Vulnerability
12 June, 2017