Vulnerability history

Broken Access Control vulnerability

Sensitive Data Exposure vulnerability

Privilege Escalation vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Subscriber+ Comment reCAPTCHA Bypass vulnerability

Contributor+ Stored XSS vulnerability

Multisite Subsite Admin+ Network Super Admin Account Takeover vulnerability

Reflected XSS vulnerability

Authenticated (Author+) Limited Privilege Escalation vulnerability

Privilege Escalation vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Privilege Escalation to 'role' Parameter vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Limited File Upload vulnerability

Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability

Unauthenticated Stored Cross-Site Scripting via 'email' Parameter vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability

Unauthenticated Unpublished Content and Media Modification vulnerability

Contributor+ Stored XSS vulnerability

Admin+ PHP Object Injection vulnerability

Unauthenticated Account Takeover vulnerability

Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter vulnerability

Broken Access Control vulnerability

WordPress User Profile Builder - Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field vulnerability

Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated Privilege Escalation vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Content Spoofing Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes vulnerability

Admin+ Stored Cross Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Media Upload vulnerability

Bypass Vulnerability vulnerability

Missing Authorization to Plugin Settings Change vulnerability

Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Missing Authorization to Initial Page Creation vulnerability

Insecure Password Reset Mechanism vulnerability

Sensitive Information Disclosure via Shortcode vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Blind SQL Injection (SQLi) vulnerability

User Registration With Administrator Role vulnerability

Reflected Cross Site Scripting

Privilege Escalation

BYPASS