itthinx Groups

• CVE-2026-0549 Medium 6.4 Groups <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' Shortcode 0.3%
• CVE-2025-11748 Medium 4.3 Groups <= 3.7.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Group Join 0.2%