Vulnerability history

Authenticated (Subscriber+) Privilege Escalation vulnerability

Reflected Cross-Site Scripting vulnerability

Reflected XSS vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Subscriber+ Post Creation vulnerability

Unauthenticated Privilege Escalation vulnerability

Unauthenticated Account Creation with Registration Disabled vulnerability

Bypass Vulnerability vulnerability

Arbitrary File Deletion vulnerability

Bypass Vulnerability vulnerability

PHP Object Injection vulnerability

Editor+ PHP Object Injection vulnerability

Unauthenticated User Email and Phone Disclosure vulnerability

Unauthenticated Author-less Attachment Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability

Broken Access Control vulnerability

Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation vulnerability

Authenticated (Subscriber+) PHP Object Injection vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter vulnerability

Broken Access Control vulnerability

Authenticated (Author+) Arbitrary File Upload vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability

Broken Access Control Vulnerability

Content Injection Vulnerability

SQL Injection vulnerability

Malicious Polyfill.io Embed vulnerability

Authenticated Privilege Escalation vulnerability

Broken Access Control vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Obscure Registration as Admin vulnerability

SQL Injection (SQLi) to Reflected Cross-Site Scripting (XSS)

SQL Injection (SQLi) vulnerability

Unrestricted File Upload