Vulnerability history

Authenticated (Custom+) SQL Injection vulnerability

Editor+ SQL Injection vulnerability

Contributor+ Non-Public Listing Field Disclosure vulnerability

Unauthenticated Unpublished Listing Disclosure vulnerability

Subscriber+ Plugin Settings and API Key Disclosure vulnerability

Subscriber+ Contact Message and User Data Disclosure vulnerability

Subscriber+ User and Unpublished Listing Disclosure vulnerability

Unauthenticated User Email Disclosure via select_2_ajax_user vulnerability

Admin+ SQL Injection via section Parameter vulnerability

Subscriber+ SQL Injection via section Parameter vulnerability

Unauthenticated SQL Injection via search_location and search_category vulnerability

SQL Injection vulnerability

SQL Injection vulnerability

SQL Injection vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

Unauthenticated Email Exposure via wdk_public_action vulnerability

Unauthenticated SQL Injection vulnerability

Authentication Bypass to Privilege Escalation via Account Takeover vulnerability

Authenticated (Admin+) SQL Injection vulnerability

Reflected Cross-Site Scripting via 'order_by' Parameter vulnerability

Unauthenticated SQL Injection via select_2_ajax() Function vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

HTML Injection vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Unauthenticated Local File Inclusion vulnerability

Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action vulnerability

Reflected Cross-Site Scripting via 'search' vulnerability

Multiple Cross-Site Request Forgery vulnerability

Multiple Missing Authorization vulnerability

Open Redirection vulnerability