Vulnerability history

Authenticated (Subscriber+) Arbitrary File Move vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Publishing vulnerability

Privilege Escalation and Account Takeover via Weak OTP vulnerability

Unauthenticated User Information Exposure vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Settings Change vulnerability

CSV Injection

Broken Access Control

Arbitrary Content Deletion vulnerability

Authenticated Privilege Escalation Vulnerability

Authenticated Arbitrary Post Deletion Vulnerability

Auth. Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Email Address Disclosure vulnerability

Authenticated Arbitrary E-mail Sending vulnerability

Authenticated Arbitrary File Upload vulnerability

Cross-Site Request Forgery (CSRF) vulnerability leading to Remote File Upload