Vulnerability history

Missing Authorization to Unauthenticated Media File Upload vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting vulnerability

Server Side Request Forgery (SSRF) vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget vulnerability

XML External Entity (XXE) vulnerability

Authenticated (Subscriber+) Private Post Disclosure vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes vulnerability

IP Bypass vulnerability

Unauthenticated Limited File Upload vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Multiple Cross-Site Request Forgery vulnerability

Missing Authorization & Cross-Site Request Forgery via wpr_update_form_action_meta vulnerability

Unauthenticated Arbitrary Post Read vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Multiple Cross Site Request Forgery (CSRF)

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated MailChimp API Key Disclosure vulnerability

Insufficient Access Control to Template Kit Import Vulnerability

Insufficient Access Control to Theme Activation Vulnerability

Insufficient Access Control to Plugin Deactivation Vulnerability

Insufficient Access Control to Menu Settings Update Vulnerability

Insufficient Access Control to Template Conditions Modification Vulnerability

Reflected Cross-Site Scripting Vulnerability

Insufficient Access Control to Template Import Vulnerability

Insufficient Access Control to Import Deletion Vulnerability

Insufficient Access Control to Plugin Activation Vulnerability

Cross-Site Request Forgery to Menu Template creation Vulnerability

Insufficient Access Control to Template Activation Vulnerability

Subscriber+ Arbitrary Post Deletion vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability