Login/Signup Popup

Authenticated (Contributor+) Stored CrossSite Scripting via xoo_el_action Shortcode vulnerability <= 2.8.5

Missing Authorization to Arbitrary Options Exposure vulnerability <= 2.7.2

Missing Authorization to Arbitrary Options Update <= 2.7.2

CrossSite Request Forgery (CSRF) vulnerability <= 2.3

CrossSite Request Forgery (CSRF) vulnerability leading to Arbitrary Options Update <= 2.2