Vulnerability history

Unauthenticated PHP Object Injection vulnerability

Authenticated (Editor+) Path Traversal to Arbitrary File Write (Zip Slip) vulnerability

Arbitrary File Deletion vulnerability

Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability

Authenticated (Editor+) Path Traversal to Arbitrary Directory Deletion vulnerability

PHP Object Injection vulnerability

Cross Site Scripting (XSS) vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Arbitrary Email Content Injection (Mail Relay / Phishing) vulnerability

Insecure Direct Object References (IDOR) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Privilege Escalation via 'handle_forgot_password' vulnerability

Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure vulnerability

Unauthenticated Limited Arbitrary File Read and Deletion vulnerability