Vulnerability history
1 present
6 patched
Cross Site Scripting (XSS) Vulnerability
7.1
28 July, 2025
Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via Countdown Timer vulnerability
6.5
11 March, 2025
Cross Site Request Forgery (CSRF) vulnerability
4.3
11 April, 2024
Subscriber+ Arbitrary Plugin Installation/Activation vulnerability
8.8
28 March, 2024
Missing Authorization to Unauthenticated System Information Disclosure vulnerability
5.3
1 March, 2024
