Vulnerability history

Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated(Editor+) PHP Object Injection vulnerability

Author+ Arbitrary File Upload Vulnerability

Auth. Path Traversal vulnerability

Multiple Vulnerabilities