Workreap

Unauthenticated Privilege Escalation via Account Takeover vulnerability <= 3.2.5

Unauthenticated Upload vulnerability leading to Remote Code Execution (RCE) <= 2.2.1

Multiple CrossSite Scripting (CSRF) + Insecure Direct Object References (IDOR) vulnerabilities <= 2.2.1

Missing authorization checks in AJAX actions vulnerability <= 2.2.1