Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion vulnerability
13 February, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Rank Math API vulnerability
12 February, 2025
Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability
22 November, 2024
Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete vulnerability
7 October, 2024
Authenticated (Administrator+) PHP Object Injection vulnerability
7 October, 2024