Vulnerability history

Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure vulnerability

Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update vulnerability

Account Takeover Vulnerability

Authenticated (Administrator+) SQL Injection via columns Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Authenticated SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Authorization Bypass via type connect-app API vulnerability

Broken Access Control on API vulnerability

Unauthenticated Stored Cross-Site Scripting via device vulnerability

Reflected Cross-Site Scripting via msg vulnerability

Authenticated (Administrator+) SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting via Email vulnerability

Account Takeover via CSRF vulnerability

Arbitrary Log Deletion via CSRF vulnerability

Authenticated Blind Server-Side Request Forgery (SSRF) vulnerability

Cross-Site Request Forgery (CSRF) nonce validation vulnerability