Vulnerability history

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Authenticated (Author+) Arbitrary File Upload vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter vulnerability

Multiple Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Arbitrary SQL Execution vulnerability

CSRF to Privilege Escalation vulnerability

Unauthenticated Arbitrary File Download and SSRF vulnerability

Unauthenticated Arbitrary WordPress Options Change vulnerability

SQL Injection