Vulnerability history

Authenticated (Custom+) Privilege Escalation to add_child REST endpoint vulnerability

Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion vulnerability

Subscriber+ Cross-Course Quiz Answer Disclosure vulnerability

Subscriber+ Arbitrary Lesson Content Disclosure vulnerability

Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure vulnerability

Broken Access Control vulnerability

Privilege Escalation vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Administrator+) PHP Object Injection via 'import_all_courses' vulnerability

Insecure Direct Object References (IDOR) Vulnerability

Broken Access Control vulnerability

Open Redirection vulnerability

Sensitive Data Exposure vulnerability

Broken Access Control on Paid Courses vulnerability

Broken Access Control vulnerability

Authenticated (Subscriber+) Privilege Escalation vulnerability