Authenticated (Contributor+) Stored CrossSite Scripting via trx_addons_get_svg_from_file Function vulnerability
21 July, 2025
Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data vulnerability
28 January, 2025
Authenticated (Contributor+) Local File Inclusion via Shortcode vulnerability
27 January, 2025