Vulnerability history

Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification vulnerability

SQL Injection vulnerability

Unauthenticated Limited File Read vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) Vulnerability

Authenticated (Author+) Limited File Deletion vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes vulnerability

Stored Cross Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting vulnerability

Remote Code Execution (RCE) vulnerability

Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated SQL Injection vulnerability

Authenticated (Contributor+) SQL Injection via Shortcode vulnerability

Reflected Cross-Site Scripting via lang vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode vulnerability

Authenticated (Contributor+) SQL Injection via Shortcode vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Unauthenticated Local/Remote File Inclusion and Code Execution vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Admin+ SQL Injection vulnerability

Unauthenticated Error Log Disclosure vulnerability

Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Limited Local File Inclusion (LFI) vulnerability