Vulnerability Search

Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter

Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification

Authenticated (Administrator+) SQL Injection via 'type' Parameter

Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls

Missing Authorization to Unauthenticated Arbitrary Attachment Deletion