Vulnerability history

Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' vulnerability

Unauthenticated SQL Injection via `phrase` Parameter vulnerability

Local File Inclusion Vulnerability

Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability

Reflected Cross-Site Scripting via really_curr_tax Parameter vulnerability

Insecure Direct Object Reference to Unsubscribe vulnerability

Privilege Escalation vulnerability

Unauthenticated Time-Based SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Remote Code Execution (RCE) vulnerability

Authenticated (Admin+) Local File Inclusion vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated (Contributor+) SQL Injection vulnerability

Cross Site Request Forgery (CSRF) vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

Admin+ PHP Object Injection vulnerability

Arbitrary File Upload Vulnerability

Authenticated Persistent Cross-Site Scripting (XSS) Vulnerability