Droip

Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 2.2.0

Missing Authorization to Authenticated (Subscriber+) Many Actions vulnerability <= 2.2.0

Unauthenticated Arbitrary File Download/Deletion vulnerability <= 1.1.1

Subscriber+ Settings Change/Data Exposure Vulnerability <= 1.1.1