Vulnerability history

Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability

Unauthenticated Stored Cross-Site Scripting via Post Body Field Value vulnerability

Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion vulnerability

Arbitrary File Deletion vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting via Credit Card 'Card Type' Sub-Field vulnerability

Reflected Cross-Site Scripting via 'form_ids' Parameter vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via Form Title vulnerability

WordPress GravityForms plugin 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style_settings' parameter vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload via Legacy Chunked Upload vulnerability

Unauthenticated Arbitrary File Upload via 'copy_post_image' vulnerability

Unauthenticated Stored Cross-Site Scripting via 'alt' parameter vulnerability

Reflected XSS vulnerability

Unauthenticated PHP Object Injection vulnerability

XSS

Arbitrary File Upload

Authenticated Reflected XSS

Cross Site Scripting

SQL Injection