Vulnerability history

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing Disruption vulnerability

Cross-Site Request Forgery to Level Orders Update vulnerability

Contributor+ Arbitrary User Custom Field Disclosure vulnerability

Authenticated SQL Injection vulnerability

Insecure Direct Object References (IDOR) vulnerability

Cross-Site Request Forgery to Membership Modification vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability

Authenticated (Contributor+) User Meta Disclosure vulnerability

Information Exposure in Debug Logs vulnerability

Missing Authorization via API vulnerability

Auth. SQL Injection (SQLi) vulnerability

Contributor+ Stored XSS via Shortcode vulnerability

Unauthenticated SQL Injection Vulnerability

Unauthenticated Blind SQL Injection (SQLi) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Insecure Direct Object Reference & sensitive information disclosure vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Authenticated Open Redirect vulnerability

Directory Traversal

Information Disclosure