Vulnerability history
1 present
8 patched
Authenticated (Contributor+) Local File Inclusion via Shortcode vulnerability
8.8
27 February, 2025
Missing Authorization in Several AJAX Actions vulnerability
6.5
18 December, 2024
Unauthenticated SQL Injection via order_id vulnerability
9.3
18 December, 2024
Unauthenticated SQL Injection (SQLi) vulnerability
9 July, 2020
Unauthenticated CrossSite Scripting (XSS) vulnerability
9 July, 2020
