Known vulnerabilities in the Visualizer plugin
9 security advisories have been published for the Visualizer plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Visualizer - Security Vulnerability (CVE-2026-19726) MEDIUM
- Visualizer - Server-Side Request Forgery (SSRF) (CVE-2026-14939) MEDIUM
- Visualizer - Cross-Site Scripting (XSS) (CVE-2026-15653) MEDIUM
- Visualizer - Broken Access Control (CVE-2026-13468) HIGH
- Visualizer - Broken Access Control (CVE-2026-8689) MEDIUM
- Visualizer - SQL Injection (CVE-2025-12483) MEDIUM
- Visualizer - Privilege Escalation (CVE-2024-3750) HIGH
- Visualizer - Cross-Site Scripting (XSS) (CVE-2023-23708) MEDIUM
- Visualizer - PHP Object Injection (CVE-2022-2444) HIGH