Vulnerability history
0 present
8 patched
Missing Authorization to Private And PasswordProtected Posts Information Disclosure vulnerability
5.3
16 August, 2025
Cross Site Scripting (XSS) vulnerability
6.5
9 August, 2024
Local File Inclusion vulnerability
6.5
7 August, 2024
Unauthenticated PHP Object Injection vulnerability
9.0
26 March, 2024
Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
6.5
26 March, 2024
