Vulnerability history

Unauthenticated Arbitrary File Upload vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability

Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Broken Access Control vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing vulnerability

Authenticated (Admin+) SQL Injection via entry vulnerability

Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated(Contributor+) Sensitive Information Exposure via Form Entries vulnerability

Authenticated (Contributor+) Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability

Authenticated Server Side Request Forgery (SSRF) vulnerability

Authenticated (Author+) Unrestricted Zip Extraction vulnerability

Authenticated Broken Access Control vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Unauthenticated Server-Side Request Forgery (SSRF) vulnerability

Arbitrary Post Creation, Edition and Deletion vulnerability

Stored Cross-Site Scripting (XSS) vulnerability