Vulnerability history

Cross Site Scripting (XSS) Vulnerability

Broken Access Control Vulnerability

CSRF to Privilege Escalation vulnerability

Local File Inclusion Vulnerability

Admin+ Stored XSS vulnerability

Admin+ SQL Injection vulnerability

Authenticated (Contributor+) Protected Post Disclosure vulnerability

Unauthenticated SQL Injection vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update vulnerability

Unauthenticated Payment Deletion via delete_payment vulnerability

Cross Site Request Forgery (CSRF) vulnerability

SQL Injection vulnerability

SQL Injection vulnerability

Insecure Direct Object References (IDOR) vulnerability