Vulnerability history

Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields vulnerability

Unauthenticated Information Exposure via Unprotected Files vulnerability

Cross Site Scripting (XSS) Vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode vulnerability

Reflected Cross-Site Scripting vulnerability

Unprotected Storage of Potentially Sensitive Files vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Stored XSS

Reflected XSS