Incorrect Authorization to Video File Upload vulnerability
6 November, 2025
Authenticated (Subscriber+) Blind ServerSide Request Forgery via post_url vulnerability
6 November, 2025
Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter vulnerability
17 June, 2025
Contributor+ Stored XSS vulnerability
22 May, 2025
Authenticated (Author+) Stored CrossSite Scripting via File Upload vulnerability
1 August, 2024