Vulnerability history

Missing Authorization to Google API key update vulnerability

Sensitive Data Exposure Vulnerability

Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Missing Authentication to API key update vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown' vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content vulnerability

Captcha Bypass vulnerability

Missing Authorization to Recaptcha API Key Modification vulnerability

Authenticated(Subscriber+) Server Side Request Forgery vulnerability

Improper Authorization via get_remote_templates REST endpoint vulnerability

Authenticated Information Disclosure vulnerability

Cross-Site Request Forgery (CSRF) / Settings Change vulnerability