Vulnerability history

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Admin+ Stored XSS vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Sensitive Information Exposure vulnerability

Cross Site Request Forgery (CSRF) Vulnerability

Sensitive Data Exposure Vulnerability

Unauthenticated SQL Injection vulnerability

Admin+ Stored XSS vulnerability

SQL Injection vulnerability

Unauthenticated SQL Injection via 'ays_questions' vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification vulnerability

Missing Authorization to Unauthenticated Quiz Data Retrieval vulnerability

Broken Access Control vulnerability

Reflected XSS vulnerability

Content Spoofing

Multiple Authenticated Blind SQL Injection (SQLi) vulnerabilities