Authenticated (Contributor+) PHP Object Injection vulnerability
3 December, 2024
Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability
28 August, 2024
Authenticated (Administrator+) Arbitrary File Deletion vulnerability
28 August, 2024
Authenticated (Administrator+) Arbitrary File Upload vulnerability
28 August, 2024
CrossSite Request Forgery to Arbitrary Post Duplication vulnerability
2 November, 2023