Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filtersGroundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins
Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation
Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload
Groundhogg <= 2.7.9.8 - Missing Authorization to Update License
Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation
ConvertKit <= 2.2.0 - Reflected Cross-Site Scripting
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.60 - Reflected Cross-Site Scripting via 'lang'
Newsletter Popup <= 1.2 - Unauthenticted Stored Cross-Site Scripting via 'nl_data'
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Record Deletion
Emails & Newsletters with Jackmail <= 1.2.22 - Authenticated (Subscriber+) CSV Injecton
Newsletters <= 4.8.8 - Cross-Site Request Forgery
Email Subscription Popup <= 1.2.16 - Reflected Cross-Site Scripting
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
Groundhogg <= 2.7.9.3 - Authenticated (Administrator)+ SQL Injection
WP SMS <= 6.0.4 - Information Disclosure via REST API
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Arigato Autoresponder and Newsletter <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection
MailOptin <= 1.2.54.0 - Authenticated (Admin+) Cross Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.