skatox JS Archive List

• CVE-2026-2020 High 7.5 JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute 0.5%
• CVE-2025-7670 High 7.5 JS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Function 0.5%