Vulnerability history

Unauthenticated SQL Injection via `p` Parameter vulnerability

Authenticated (Contributor+) Privilege Escalation via create_autosave vulnerability

Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery via save_settings vulnerability

Unauthenticated Remote Code Execution (RCE) vulnerability

Auth. Remote Code Execution vulnerability

Auth. Arbitrary Post/Page Edition vulnerability