Vulnerability history

Authenticated (Administrator+) PHP Object Injection via CSV Import vulnerability

Missing Authorization to Authenticated (Author+) Sensitive Information Exposure vulnerability

Authenticated (Subscriber+) Remote Code Execution via Code Injection vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure vulnerability

Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Arbitrary Usermeta Update to Privilege Escalation vulnerability

Sensitive Information Exposure via Directory Listing vulnerability

Authenticated PHP file upload to RCE vulnerability

Authenticated Remote Code Execution vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Missing Authorization vulnerability

Authenticated Blind Server-Side Request Forgery (SSRF) vulnerability

Arbitrary Option Deletion vulnerability

Arbitrary File Upload vulnerability

Arbitrary Media File Deletion vulnerability

Plugin Settings Update vulnerability

Reflected Cross Site Scripting

Directory Traversal

Information Disclosure