Plugin
Reflected Cross Site Scripting (XSS) vulnerability
3 June, 2025
PHP Object Injection vulnerability
20 May, 2025
Unauthenticated Arbitrary File Download vulnerability
7 April, 2025
WordPress Wave Audio Player with Playlist plugin <= 6.91 Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation vulnerability
4 April, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
4 April, 2025