Reflected CrossSite Scripting via envato_code[] vulnerability
2 September, 2024
Authenticated (Contributor+) Stored CrossSite Scripting via button Shortcode vulnerability
4 June, 2024
Authenticated Stored CrossSite Scripting via Attachment Meta vulnerability
18 April, 2024
Authenticated Local File Inclusion via Shortcode vulnerability
18 April, 2024
Admin+ Stored XSS vulnerability
17 August, 2023