Vulnerability history

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Content Spoofing Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes vulnerability

Admin+ Stored Cross Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Media Upload vulnerability

Bypass Vulnerability vulnerability

Missing Authorization to Plugin Settings Change vulnerability

Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Missing Authorization to Initial Page Creation vulnerability

Insecure Password Reset Mechanism vulnerability

Sensitive Information Disclosure via Shortcode vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Blind SQL Injection (SQLi) vulnerability

User Registration With Administrator Role vulnerability

Reflected Cross Site Scripting

Privilege Escalation

BYPASS