Vulnerability history

Broken Access Control vulnerability

Reflected DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting vulnerability

Admin+ Arbitrary File Deletion vulnerability

Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

Unauthenticated Arbitrary Shortcode Execution vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Stored XSS vulnerability

Unauthenticated Password Hash and Arbitrary Metadata Disclosure vulnerability

Unauthenticated Email Header Injection vulnerability

Missing Authorization to Unauthenticated JetEngine Options Page Modification vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability

Privilege Escalation vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Read via Media Field vulnerability

Remote Code Execution (RCE) vulnerability

Missing Authorization to Unauthenticated Form Generation vulnerability

Broken Access Control vulnerability

PHP Object Injection Vulnerability

Authenticated (Administrator+) Privilege Escalation vulnerability

Content Injection vulnerability

Authenticated Privilege Escalation vulnerability

Cross Site Request Forgery (CSRF) vulnerability