Vulnerability history

Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter vulnerability

Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse vulnerability

HTML Injection vulnerability

Reflected Cross-Site Scripting via Custom HTML Form Parameter vulnerability

Admin+ Stored XSS vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Content Injection vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Auth. Remote Code Execution (RCE) vulnerability

Unauth. PHP Object Injection vulnerability

IP Spoofing vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery vulnerability

Authenticated (Admin+) Server-Side Request Forgery vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Unsafe Deserialisation vulnerability

SQL Injection (SQLi) vulnerability

Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple vulnerabilities

Remote Code Execution

Unspecified Vulnerabilities

Blind SQL Injection