Vulnerability history
0 present
9 patched
Unauthenticated PHP Object Injection to Limited Remote Code Execution vulnerability
9.8
2 June, 2025
Admin+ Stored XSS vulnerability
5.9
31 January, 2025
Authenticated (Author+) Stored CrossSite Scripting via SVG File Upload vulnerability
5.9
27 August, 2024
Server Side Request Forgery (SSRF) vulnerability
4.4
30 May, 2024
Broken Access Control vulnerability
5.3
19 January, 2024
