Vulnerability history

Unauthenticated Arbitrary Shortcode Execution vulnerability

Broken Access Control vulnerability

Authenticated (Subscriber+) Directory Traversal vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Privilege Escalation vulnerability

Excessive user capabilities in possible rich text fields vulnerability

Arbitrary File Deletion

Privilege Escalation

Multiple SQL Injections

SQL Injection

Privilege Escalation

XSS

Remote SQL Injection

HTML Injection Vulnerability