📦 April

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to upload arbitrary files through vulnerable plugins/themes. This can lead to remote code execution on af...

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to reset and modify plugin/theme settings due to missing capability checks on AJAX actions. It affects mu...