Vulnerability history

Broken Access Control vulnerability

Authenticated (Contributor+) PHP Object Injection vulnerability

Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability

Authenticated (Administrator+) Arbitrary File Deletion vulnerability

Authenticated (Administrator+) Arbitrary File Upload vulnerability

Cross-Site Request Forgery to Arbitrary Post Duplication vulnerability

Cross-Site Request Forgery to Arbitrary Post Deletion vulnerability

Multiple Missing Authorization vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

WordPress Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor - Funnelforms Free plugin < 3.3.8.5 - Reflected Cross Site Scripting (XSS) vulnerability