Vulnerability history

Reflected DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability

Contributor+ Stored XSS via ai-assistant Block vulnerability

Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Contributor+ Stored XSS vulnerability

WordPress All in One SEO - Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure vulnerability

SQL Injection vulnerability

Sensitive Data Exposure vulnerability

Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion vulnerability

Sensitive Data Exposure Vulnerability

Broken Access Control Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Authenticated Privilege Escalation vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross Site Scripting

Cross Site Scripting

Persistent XSS

Cross Site Scripting

Cross Site Scripting

Privilege Escalation

Information Management