Authenticated (Contributor+) Stored CrossSite Scripting via Shortcodes vulnerability
3 July, 2025
Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias vulnerability
17 February, 2025
Reflected Cross Site Scripting (XSS) vulnerability
21 December, 2023
Arbitrary File and Directory Deletion vulnerability
21 December, 2023
Privilege Escalation vulnerability
21 December, 2023