Insecure Direct Object Reference to Unauthenticated Private Product Exposure vulnerability
18 October, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via woosq_btn Shortcode vulnerability
19 August, 2025
Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via FancyBox JavaScript Library
3 December, 2024
Authenticated (Administrator+) Stored CrossSite Scripting vulnerability
15 April, 2024