Vulnerability history

Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action vulnerability

Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders vulnerability

Broken Access Control vulnerability

Account Takeover vulnerability

Missing Authorization to Account Takeover/Privilege Escalation vulnerability

Arbitrary File Upload vulnerability

Cross-Site Scripting (XSS) vulnerability