Vulnerability history

Missing Authentication to Unauthenticated Mailing Queue Trigger vulnerability

PHP Object Injection vulnerability

Admin+ Stored XSS in Template vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Admin+ SQL Injection vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Missing Authorization vulnerability

Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability

Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id] vulnerability

Unauthenticated SQL Injection via hash vulnerability

Missing Authorization in handle_ajax_request vulnerability

Unauthenticated SQL Injection vulnerability

Authenticated (Administrator+) Cross-Site Scripting via CSV import vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Authenticated (Administrator+) Directory Traversal to Arbitrary File Read vulnerability

CSV Injection

Unauthenticated email forgery/spoofing vulnerability

Authenticated SQL injection (SQLi) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Multiple security issues

Cross-Site Scripting (XSS) vulnerability

Missing Function Level Access Control vulnerability

Multiple Vulnerabilities