Vulnerability history

SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes vulnerability

PHP Object Injection vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Server Side Request Forgery (SSRF) Vulnerability

Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Arbitrary File Upload Vulnerability

Author+ XSS via Podcast URL vulnerability

Cross Site Scripting (XSS) Vulnerability

Server Side Request Forgery (SSRF) Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter vulnerability

Injected Backdoor vulnerability

Contributor+ Stored XSS vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via Media URL vulnerability

Server Side Request Forgery (SSRF) vulnerability

Authenticated Stored Cross-Site Scripting Vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities

Authenticated Arbitrary File Upload leading to Remote Code Execution (RCE) vulnerability

XSS

XSS