Vulnerability history

Authenticated (Manager+) SQL Injection via 'sort' Parameter vulnerability

Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change vulnerability

Privilege Escalation vulnerability

Missing Authorization to Unauthenticated Multiple AJAX Actions vulnerability

Broken Access Control vulnerability

WordPress Amelia plugin - 1.2.18-1.2.36 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated SQL Injection via search vulnerability

Unauthenticated Full Path Disclosure vulnerability

Insecure Direct Object References (IDOR) vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability

Unauthenticated Full Path Disclosure vulnerability

Malicious Polyfill.io Embed vulnerability

Authenticated Stored Cross-Site Scripting vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

SMS Service Abuse and Sensitive Data Disclosure vulnerability

Arbitrary Appointments Status Update vulnerability

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Arbitrary Appointments Update and Sensitive Data Disclosure vulnerability

Remote Code Execution (RCE) vulnerability

Arbitrary Customer Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability