Author+ Stored XSS vulnerability
2 days ago
Lite plugin <= 2.4.6 Missing Authorization to Authenticated (Subscriber+) Limited Settings Update vulnerability
4 August, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Page Title Widget vulnerability
23 December, 2024
Authenticated (Author+) Stored CrossSite Scripting via SVG File Upload vulnerability
8 November, 2024
Authenticated (Contributor+) Information Disclosure vulnerability
23 October, 2024