Vulnerability history

Direct static code injection vulnerability

Subscriber+ Unattached Media Deletion and Modification vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Arbitrary Content Deletion vulnerability

Broken Access Control vulnerability

Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts vulnerability

Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Subscriber+) Feature Modification vulnerability

Arbitrary File Download vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Sensitive Data Exposure vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description vulnerability

Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering vulnerability

Broken Access Control Vulnerability

Content Injection Vulnerability

Local File Inclusion Vulnerability

Unauthenticated Settings Exposure vulnerability

Authenticated (Subscriber+) Limited Arbitrary Option Update vulnerability

Local File Inclusion vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Missing Authorization vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion vulnerability

Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account vulnerability

Missing Authorization vulnerability

Cross Site Request Forgery (CSRF) Leading To Thumbnail Removal Vulnerability