Vulnerability history

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability

Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing vulnerability

Incorrect Authorization to Video File Upload vulnerability

Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url vulnerability

Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter vulnerability

Contributor+ Stored XSS vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via File Upload vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability

Information Exposure vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Missing Authorization to Auth. Settings Update vulnerability

Authenticated Server-Side Request Forgery (SSRF) vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Cross-Site Scripting (XSS) vulnerability

SQL Injection (SQLi) vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability