Vulnerabilities in itthinx

2 results
CVE-2026-0549MEDIUMGroups <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' ShortcodeEPSS 0.3%CVE-2025-11748MEDIUMGroups <= 3.7.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Group JoinEPSS 0.2%