Vulnerability history

SQL Injection vulnerability

SQL Injection vulnerability

Insecure Direct Object Reference to Notifications Deletion vulnerability

Authenticated (Subscriber+) PHP Object Injection vulnerability

Subscriber+ Private Messages Disclosure vulnerability

Authenticated (Custom+) Insecure Direct Object Reference vulnerability

Authenticated (Custom+) Insecure Direct Object Reference vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability

Broken Access Control vulnerability

Authenticated (Subscriber+) Directory Traversal vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Privilege Escalation vulnerability

Excessive user capabilities in possible rich text fields vulnerability

Arbitrary File Deletion

Privilege Escalation

Multiple SQL Injections

SQL Injection

Privilege Escalation

XSS

Remote SQL Injection

HTML Injection Vulnerability