Vulnerability history

Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability

Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action vulnerability

Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Authentication vulnerability

Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation vulnerability

Authenticated (Subscriber+) Missing Authorization to Multiple Functions vulnerability

SQL Injection vulnerability

Authenticated (Administrator+) SQL Injection via field_conditions vulnerability

SQL Injection Vulnerability

Reflected Cross-Site Scripting via a-0-o-search_field_value vulnerability

Cross Site Request Forgery vulnerability

Cross Site Request Forgery (CSRF)

Missing Authorization and Privilege Escalation vulnerability