Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion vulnerability
4 days ago
Authenticated (Admin+) SQL Injection vulnerability
6 September, 2024
Authenticated (Contributor+) SQL Injection via Shortcode vulnerability
5 June, 2024
Cross Site Request Forgery (CSRF) vulnerability
8 April, 2024
Missing Authorization via process_review vulnerability
28 February, 2024