Vulnerability history
2 present
2 patched
Cross Site Scripting (XSS) Vulnerability
6.5
22 September, 2025
Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability
4.3
8 January, 2025
Broken Access Control vulnerability
6.5
9 August, 2024
Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability
6.5
7 November, 2023
