Vulnerability history
0 present
4 patched
Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation vulnerability
6.5
17 September, 2025
CrossSite Request Forgery vulnerability
4.3
24 December, 2024
Authenticated (Author+) Stored CrossSite Scripting via Shortcode vulnerability
5.9
11 October, 2023
Arbitrary Settings Update to Stored CrossSite Scripting (XSS) vulnerability
5.4
5 January, 2022
