Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
1 May, 2025
Insecure Direct Object Reference vulnerability
1 May, 2025
Unauthenticated Product Price Manipulation vulnerability
23 April, 2025
Unauthenticated Information Exposure via file_url Parameter vulnerability
23 April, 2025
Authenticated (Contributor+) Stored CrossSite Scripting vulnerability
23 December, 2024