Cross Site Request Forgery (CSRF) to Settings Change vulnerability
12 June, 2025
Broken Access Control vulnerability
29 May, 2025
Broken Access Control Vulnerability
7 May, 2025
Authenticated (Contributor+) Blind ServerSide Request Forgery via remote_request vulnerability
17 February, 2025
Authenticated (Author+) Stored CrossSite Scripting vulnerability
5 June, 2024