Lite plugin <= 2.4.6 Missing Authorization to Authenticated (Subscriber+) Limited Settings Update vulnerability
4 August, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Page Title Widget vulnerability
23 December, 2024
Authenticated (Author+) Stored CrossSite Scripting via SVG File Upload vulnerability
8 November, 2024
Authenticated (Contributor+) Information Disclosure vulnerability
23 October, 2024
Contributor+ DOMBased Cross Site Scripting (XSS) vulnerability
1 July, 2024