Authenticated (Contributor+) Stored CrossSite Scripting via qs_date Shortcode vulnerability
18 October, 2025
Unauthenticated Arbitrary File Deletion vulnerability
19 August, 2025
Unauthenticated PHP Object Injection via PHAR Deserialization vulnerability
19 August, 2025
Unauthenticated PHP Object Injection vulnerability
19 August, 2025
Broken Access Control vulnerability
3 October, 2023