TheGem

Broken Access Control Vulnerability <= 5.10.5

Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update vulnerability <= 5.10.3

Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 5.10.3

Reflected Cross Site Scripting (XSS) vulnerability <= 5.9.1

Broken Access Control vulnerability < 5.8.1.1