Vulnerability history

Broken Access Control vulnerability

PHP Object Injection Vulnerability

Unauthenticated User Information Exposure vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Unauthenticated Paid Order Creation vulnerability

Unauthenticated Privilege Escalation vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Sensitive Data Exposure via API vulnerability

Unauthenticated Password Protected Posts Access vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Information Exposure via get_posts API Endpoint vulnerability

Authenticated Cross-Site Scripting vulnerability

Sensitive Data Exposure vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

PHP Object Injection vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Arbitrary File Deletion

File Deletion Vulnerability