Vulnerability history

Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Arbitrary File Upload vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Missing Authorization via Multiple Functions vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery via Multiple Functions vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability