Vulnerability history

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Insecure Direct Object References (IDOR) Vulnerability

Local File Inclusion vulnerability

Missing Authorization to Authenticated (Subscriber+) Wizard Set-up vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Local File Inclusion vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title vulnerability

Missing Authorization vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple security issues