Vulnerability history

Admin+ Arbitrary File Deletion vulnerability

Admin+ File Write Outside the Backup Directory vulnerability

Admin+ SQLi vulnerability

Admin+ Arbitrary File Write vulnerability

Unauthenticated Path Traversal via send_to_site_connect vulnerability

Authenticated (Administrator+) SQL Injection vulnerability

Authenticated (Admin+) Arbitrary Directory Deletion vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Authenticated (Admin+) Arbitrary Directory Creation vulnerability

Authenticated (Administrator+) Arbitrary File Upload vulnerability

Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file vulnerability

Broken Access Control vulnerability

Unauthenticated PHP Object Injection vulnerability

Unauthenticated Sensitive Data Exposure vulnerability

Authenticated (Admin+) PHAR Deserialization vulnerability

Missing Authorization vulnerability

Missing Authorization vulnerability

Unauthenticated SQL Injection vulnerability

Google Drive Client Secret Exposure vulnerability

Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated(Administrator+) Stored Cross-Site Scripting vulnerability

Privilege Escalation on Staging Environment vulnerability

Authenticated Arbitrary File Deletion vulnerability

Authenticated PHAR Deserialization vulnerability

Arbitrary File Read vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

SQL Injection (SQLi) vulnerability

Missing Authorization vulnerability leading to Database Leak