Vulnerability history

Cross Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Copy/Upload vulnerability

Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value vulnerability

Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode vulnerability

Unauthenticated PHP Object Injection via 'download_csv' vulnerability

Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export vulnerability

Unauthenticated PHP Object Injection to Arbitrary File Deletion vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode vulnerability

Authenticated (Administrator+) Arbitrary File Upload vulnerability

Cross Site Scripting (XSS) vulnerability

Auth. SQL Injection (SQLi) vulnerability

Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities