Vulnerability history

Cross Site Scripting (XSS) vulnerability

SQL Injection vulnerability

File Overwrite via Race Condition vulnerability

SQL Injection vulnerability

Cross-Site Request Forgery in wfu_file_details vulnerability

Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion vulnerability

Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php vulnerability

Unuathenticated Remote Code Execution vulnerability

Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal vulnerability

Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php vulnerability

Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability

Unauthenticated Stored XSS vulnerability

Reflected XSS vulnerability

Broken Access Control + CSRF vulnerability

Authenticated (Contributor+) Directory Traversal vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated(Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Contributor+ Path Traversal vulnerability leading to Remote Code Execution (RCE)

Stored Cross-Site Scripting (XSS) via Malicious SVG vulnerability

Contributor+ Stored Cross-Site Scripting (XSS) via Shortcode vulnerability

Directory Traversal vulnerability leading to Remote Code Execution (RCE)

Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting via Shortcodes