Vulnerability history

Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode vulnerability

Broken Access Control vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Withdrawal Request Approval vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) Vulnerability

Race Condition Vulnerability

Broken Access Control Vulnerability

Broken Access Control Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Unauthenticated Database Upgrade vulnerability

PHP Object Injection vulnerability

Cross Site Scripting (XSS) vulnerability

Sensitive Data Exposure vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF)

User E-mail Addresses Disclosure vulnerability

Arbitrary Post Creation vulnerability

Import/Export to Email Address Disclosure vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

SQL Injection (SQLi) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability