Vulnerability history

Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability

Unauthenticated SQL Injection vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Admin+ Cross Site Scripting vulnerability

Reflected Cross Site Scripting vulnerability

Admin+ Cross Site Scripting via Product Title vulnerability

Admin+ SQL Injection vulnerability

Insufficient Authorization to Arbitrary Options Update via fpd_update_options vulnerability

Insufficient Authorization on Multiple AJAX Actions vulnerability

Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary File Upload

Unauthenticated Arbitrary File Upload and Remote Code Execution (RCE) vulnerabilities

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability