Vulnerability history

Subscriber+ Stored Cross-Site Scripting via File Rename vulnerability

Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary Email Sending vulnerability

Subscriber+ Arbitrary File Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter vulnerability

Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability

Content Injection vulnerability

Sensitive Data Exposure vulnerability

Editor+ Arbitrary File Download vulnerability

File Upload via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Arbitrary File Upload vulnerability

Unauthenticated File Renaming vulnerability

Privilege Escalation vulnerability

Unauthenticated Content Injection and Stored XSS vulnerabilities

Authenticated Settings Change and Arbitrary File Upload vulnerabilities

Unauthenticated HTML Injection vulnerability

Unauthenticated Post Meta Change and Arbitrary File Download vulnerability

Unauthenticated Arbitrary Post Deletion vulnerability

Arbitrary File Upload

Arbitrary File Upload

Arbitrary File Upload

Unrestricted File Upload