CVE-2015-0899
High
Authorization Bypass
>=1.1.0 <=1.3.10
February 1, 2024
CVE-2012-1007
Low
Cross-Site Scripting
<=1.3.10
February 1, 2024
CVE-2014-0094
Medium
Remote Code Execution
>=2.0.0, <2.3.16.2
March 6, 2014
CVE-2016-3081
High
Remote Code Execution
>=2.3.19 <2.3.20.3, >=2.3.21 <2.3.24.3, >=2.3.25 <2.3.28.1
April 20, 2016
CVE-2018-11776
Critical
Remote Code Execution
>=2.3.0 <2.3.35, >=2.5.0 <2.5.17
August 18, 2022
CVE-2017-5638
Critical
Command Injection
>= 2.3.5 - <2.3.31, >=2.5 - <2.5.10
March 16, 2017
CVE-2024-53677
Critical
Remote Code Execution
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.3.0.2
December 17, 2024