Vulnerability history

Reflected Cross Site Scripting (XSS) vulnerability

PHP Object Injection vulnerability

Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation vulnerability

Cross-Site Request Forgery to User Update via update_user_profile vulnerability

Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion and Read vulnerability