Vulnerability history

Cross Site Scripting (XSS) vulnerability

Unauthenticated Export ZIP File Deletion via delexportzips vulnerability

Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal vulnerability

Reflected XSS via lbstart vulnerability

Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability

Unauthenticated Option Disclosure via gettogo vulnerability

Subscriber+ Stored XSS vulnerability

Authenticated (Administrator+) SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

SQL Injection vulnerability

Unauthenticated SQL Injection via 'wppa-supersearch' Parameter vulnerability

SQL Injection vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload vulnerability

Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated Stored Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability

Cross Site Scripting (XSS) vulnerability

Insecure Direct Object References (IDOR) vulnerability

IP Bypass vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Cross Site Scripting

Full Path Disclosure

XSS

XSS

Stored XSS

Reflected XSS

XSS

Multiple XSS

XSS

SQL Injection