Vulnerability history

Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint vulnerability

Unauthenticated Category-Locked Content Disclosure via Core REST API vulnerability

Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass vulnerability

Contributor+ Protected Content Disclosure via Core REST API vulnerability

Unauthenticated Protected Content Disclosure vulnerability

Broken Access Control vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Sensitive Data Exposure vulnerability

Cross Site Scripting (XSS) Vulnerability

Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Protection Bypass & Arbitrary Post Access vulnerability

Contributor+ Stored XSS vulnerability

Insecure Storage of Password vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability