Vulnerability history

Cross Site Scripting (XSS) vulnerability

PHP Object Injection vulnerability

Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' vulnerability

Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts vulnerability

Unauthenticated Missing Authorization via Site Assistant REST Endpoints vulnerability

WordPress Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Subscriber+) Email Sending vulnerability

Unauthenticated Arbitrary File Read and Deletion vulnerability

Unauthenticated PHP Object Injection via Form Entry Metadata vulnerability

Arbitrary Shortcode Execution vulnerability

Admin+ Stored XSS vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Unauthenticated PHP Object Injection vulnerability

Unauthenticated Arbitrary File Upload, Read, and Deletion vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Unauthenticated Server-Side Request Forgery via font_url vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

SQL Injection (SQLi) vulnerability