Vulnerability history
2 present
10 patched
CrossSite Request Forgery to Account Takeover via change_password() Function vulnerability
8.8
7 days ago
Unauthenticated Authentication Bypass via load_step Function vulnerability
8.2
7 days ago
Authenticated (Administrator+) Stored CrossSite Scripting vulnerability
5.9
7 days ago
Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
6.5
7 days ago
Unauthenticated LFI vulnerability
8.1
13 August, 2025
