Vulnerability history

Authentication Bypass to Privilege Escalation via Account Takeover vulnerability

Authenticated (Admin+) SQL Injection vulnerability

Reflected Cross-Site Scripting via 'order_by' Parameter vulnerability

Unauthenticated SQL Injection via select_2_ajax() Function vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

HTML Injection vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Unauthenticated Local File Inclusion vulnerability

Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action vulnerability

Reflected Cross-Site Scripting via 'search' vulnerability

Multiple Cross-Site Request Forgery vulnerability

Multiple Missing Authorization vulnerability

Open Redirection vulnerability