Authenticated (Contributor+) Stored CrossSite Scripting via UACF7_CUSTOM_FIELDS Shortcode vulnerability
6 days ago
3.5.19 Unauthenticated Stored CrossSite Scripting vulnerability
26 June, 2025
Authenticated (Administrator+) Arbitrary File Upload via 'save_options' vulnerability
18 June, 2025
Unauthenticated Cross Site Scripting (XSS) vulnerability
4 December, 2023
Broken Access Control vulnerability
9 November, 2023