Vulnerability history

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Arbitrary Email Content Injection (Mail Relay / Phishing) vulnerability

Insecure Direct Object References (IDOR) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Privilege Escalation via 'handle_forgot_password' vulnerability

Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure vulnerability

Unauthenticated Limited Arbitrary File Read and Deletion vulnerability