Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
21 January, 2025
Authenticated (Subscriber+) ServerSide Request Forgery vulnerability
21 January, 2025
Authenticated (Admin+) PHP Object Injection vulnerability
21 January, 2025
Unauthenticated Arbitrary File Upload vulnerability
30 October, 2024
4 plugin <= 1.8.66 Cross Site Scripting (XSS) vulnerability
1 July, 2024