Vulnerability history

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated (Admin+) SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode vulnerability

Insecure Direct Object Reference to Unauthenticated Limited User Deletion vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Insecure Direct Object Reference to Unauthenticated Membership Modification vulnerability

Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update vulnerability

Authentication Bypass vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Privilege Escalation vulnerability

Reflected Cross-Site Scripting vulnerability

Missing Authorization to Privilege Escalation vulnerability

Authenticated (Subscriber+) Privilege Escalation vulnerability

Missing Authorization to Unauthenticated Media Deletion vulnerability

Unauthenticated Stored Self-Based Cross-Site Scripting vulnerability

Admin+ Stored XSS vulnerability

Authenticated Arbitrary File Upload vulnerability

Broken Access Control vulnerability

Authenticated PHP Object Injection vulnerability

Cross Site Scripting (XSS)

Stored Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability