Vulnerability history

Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Missing Authorization to Authenticated (Subscriber+) Limited Options Update vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion vulnerability

Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Insecure Direct Object Reference (IDOR) vulnerability

Contributor+ Stored XSS vulnerability

Unauthenticated SQL Injection (SQLi) vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability