Vulnerability history

Subscriber+ Membership Level Escalation vulnerability

Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding vulnerability

Unauthenticated Stored XSS via PayPal Subscription Subscriber Name vulnerability

Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Unauthenticated Improper Handling of Missing Values vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) Vulnerability

Exposure of Private Personal Information to an Unauthorized Actor vulnerability

Open Redirection vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Unauthenticated Stored Self-Based Cross-Site Scripting vulnerability

Open Redirection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Authenticated Account Takeover vulnerability

Unauthenticated Membership Role Privilege Escalation vulnerability

Reflected Cross-Site Scripting vulnerability

Contributor+ Stored XSS vulnerability

Unauthenticated Membership Privilege Escalation vulnerability

Membership Privilege Escalation vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Arbitrary Transaction Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Member Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Cross Site Scripting (XSS)