Vulnerability history

Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability

Privilege Escalation vulnerability

Broken Access Control vulnerability

Broken Authentication vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update vulnerability

Missing Authorization to Authenticated (Subscriber+) Posts Creation vulnerability

Unauthenticated Limited Privilege Escalation vulnerability

Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting) vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability

Unauthorized User Registration vulnerability

Authenticated (Subscriber+) Limited Arbitrary File Upload vulnerability

Authentication Bypass to Account Takeover vulnerability

Authentication Bypass vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Unauthorized Account Access and Privilege Escalation vulnerability

SQL Injection vulnerability

Unauth. SQL Injection (SQLi) vulnerability

SQL Injection

Cross-Site Request Forgery to Product Limit Update vulnerability

Cross-Site Request Forgery to Order Message Update vulnerability

Cross-Site Request Forgery to Order Title Update vulnerability

Cross-Site Request Forgery to Order Title Update vulnerability

Cross-Site Request Forgery to Order Status Update vulnerability

Cross-Site Request Forgery to Firebase Server Key Update vulnerability

Missing Authorization vulnerability

Authentication Bypass vulnerability

Authentication Bypass vulnerability

Bypass vulnerability in Apple login authentication method

Unauthenticated Account Create/Edit vulnerability