Vulnerability history

Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Administrator+ Limited Arbitrary Function Call vulnerability

Missing Authorization to Information Disclosure vulnerability

Missing Authorization to Information Disclosure vulnerability

Missing Authorization on Option Changes vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Subscriber+ Broken Access Control vulnerability

Contributor+ Broken Access Control vulnerability

Auth. Custom Field Access vulnerability

Contributor+ Local File Inclusion vulnerability

Contributor+ Arbitrary Function Execution vulnerability

Contributor+ Stored Cross-Site Scripting vulnerability

Auth. Stored Cross-Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Contributor+ PHP Object Injection vulnerability

Unauthenticated File Upload vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability