Vulnerability history

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

PHP Object Injection vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure vulnerability

Privilege Escalation vulnerability

Privilege Escalation vulnerability

SQL Injection vulnerability

Unauthenticated Stored XSS vulnerability

Subscriber+ Stored XSS via Custom Textarea Profile Fields vulnerability

Unauthenticated Unapproved Comment Disclosure vulnerability

Unauthenticated Privilege Escalation vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Unauthenticated Privilege Escalation vulnerability

SQL Injection vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Account Takeover vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via DOM Gadgets vulnerability

Authenticated (Contributor+) Sensitive Information Exposure to Account Takeover via Shortcode Template Tag vulnerability

Reflected Cross-Site Scripting via Filter Parameters vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Unauthenticated Sensitive Information Exposure vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via 'value' vulnerability

Authenticated (Subscriber+) Profile Privacy Setting Bypass vulnerability

Arbitrary Function Call vulnerability

Unauthenticated Blind SQL Injection vulnerability

Unauthenticated SQL Injection via search Parameter vulnerability

Authenticated SQL Injection vulnerability

Information Exposure vulnerability

Unauthenticated SQL Injection vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update vulnerability

Cross-Site Request Forgery to Membership Status Change vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated SQL Injection vulnerability

Cross-Site Request Forgery vulnerability

Unauthenticated Privilege Escalation

Cross Site Request Forgery (CSRF) vulnerability

Auth. Directory Traversal vulnerability

Auth. Directory Traversal vulnerability

Auth. Remote Code Execution vulnerability

Auth. Limited Remote Code Execution vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Open Redirect vulnerability

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated/Authenticated Privilege Escalation

Insecure Direct Object Reference (IDOR) vulnerability

Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple vulnerabilities

Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Change Passwords

Local File Inclusion

Reflected Cross Site Scripting

Cross Site Scripting

Multiple Vulnerabilities