Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filtersAcyMailing SMTP Newsletter < 7.5.0 - Open Redirect
Newsletter by Supsystic <= 1.5.6 - Authenticated (Admin+) Time-Based Blind SQL Injection
Popup Builder <= 3.72 Missing Authorization on AJAX actions
Newsletter Manager <= 1.5.1 - Insecure Deserialization
Mailster <= 2.4.5.1 - Stored Cross-Site Scripting
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting
Newsletter <= 6.8.1 - Authenticated PHP Object Injection
Icegram Email Subscribers & Newsletters <= 4.5.0 - Authenticated SQL Injection
Icegram Email Subscribers & Newsletters Plugin for WordPress <= 4.5.0 - Cross-Site Request Forgery
SendPress Newsletters < 1.20.7.13 - Authenticated Stored Cross-Site Scripting
Newsletter <= 6.7.6 - Stored Cross-Site Scripting
Newsletter <= 6.5.3 - CSV Injection
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated Option Creation
Email Subscribers & Newsletters <= 4.2.2 - Cross-Site Request Forgery on Settings
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated File Download w/ Information Disclosure
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization to Test Email
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization
Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection
Groundhogg <= 1.3.11.13 - SQL Injection
Groundhogg <= 2.0.8.1 - Reflected Cross-Site Scripting
Email Subscribers & Newsletters <= 4.1.7 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.