Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filtersSuper Progressive Web Apps <= 2.2.21 - Missing Authorization
BlossomThemes Email Newsletter <= 2.2.4 - Missing Authorization
AWeber <= 7.3.9 - Missing Authorization via AJAX actions
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection
Arigato Autoresponder and Newsletter <= 2.7.2.2 - Cross-Site Request Forgery
SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Groundhogg <= 2.7.11.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via Task Data
Newsletter & Bulk Email Sender <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
SendPress Newsletters <= 1.23.11.6 - Cross-Site Request Forgery
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
SendPress Newsletters <= 1.23.11.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Easy Newsletter Signups <= 1.0.4 - Missing Authorization
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
SendPress Newsletters <= 1.23.11.6 - Missing Authorization
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Subscribe2 <= 10.40 - Missing Authorization
Subscribe2 <= 10.40 - Cross-Site Request Forgery
FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control
Groundhogg <= 2.7.11 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.