Vulnerability history

Broken Access Control vulnerability

Broken Access Control vulnerability

Privilege Escalation vulnerability

Broken Access Control vulnerability

Missing Authorization to Authenticated (Subscriber+) Stripe Account Hijack vulnerability

Unauthenticated Path Traversal to Local File Inclusion vulnerability

Arbitrary File Deletion vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter vulnerability

PHP Object Injection vulnerability

Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration vulnerability

Missing Authorization to Carbon Fields Custom Sidebar Addition/Removal vulnerability

Cross Site Request Forgery (CSRF) vulnerability