Cross Site Request Forgery (CSRF) vulnerability
14 October, 2024
Reflected Cross Site Scripting (XSS) vulnerability
30 September, 2024
Authenticated (Contributor+) Arbitrary File Upload vulnerability
24 July, 2024
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template vulnerability
24 July, 2024
Authenticated (Subscriber+) Stored CrossSite Scripting vulnerability
24 July, 2024