Vulnerability history

Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode vulnerability

Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode vulnerability

Authenticated (Contributor+) Arbitrary File Upload via featured image vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Download & SSRF vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability

Local File Inclusion (LFI) vulnerability