Vulnerability history
2 present
10 patched
CrossSite Request Forgery to Account Takeover via change_password() Function vulnerability
8.8
30 September, 2025
Unauthenticated Authentication Bypass via load_step Function vulnerability
8.2
30 September, 2025
Authenticated (Administrator+) Stored CrossSite Scripting vulnerability
5.9
30 September, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
6.5
30 September, 2025
Unauthenticated LFI vulnerability
8.1
13 August, 2025
