Vulnerability history

Cross Site Scripting (XSS) vulnerability

Author+ Path Traversal vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator vulnerability

Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key vulnerability

Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability

Path Traversal vulnerability

Unauthenticated Arbitrary File Read vulnerability

Arbitrary Code Execution vulnerability

Unauthenticated Security Token Exposure via User-Agent Header vulnerability

Broken Access Control vulnerability

Arbitrary Code Execution vulnerability

Unauthenticated Command Injection vulnerability

WordPress W3 Total Cache plugin <= 2.8.1 Information Exposure via Log Files vulnerability

WordPress W3 Total Cache plugin <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation vulnerability

Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery vulnerability

Sensitive Credentials Stored in Plaintext vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Bypass

Arbitrary File Upload

Arbitrary File Download

Arbitrary PHP Code Execution

Reflected Cross Site Scripting

Cross Site Request Forgery

XSS

Cross-Site Request Forgery (CSRF) vulnerability

PHP Code Execution vulnerability