Vulnerability history

Unauthenticated PHP Object Injection vulnerability

Missing Authorization to Authenticated (Author+) Post Content Modification vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated(Editor+) PHP Object Injection vulnerability

Author+ Arbitrary File Upload Vulnerability

Auth. Path Traversal vulnerability

Multiple Vulnerabilities