Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filtersEmail Newsletter <= 8.0 - Sensitive Information Disclosure
Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting
ENL Newsletter <= 1.0.1 - Authenticated (Admin+) SQL Injection
EnvialoSimple: Email Marketing y Newsletters < 1.98 - Cross-Site Scripting
Newsletter Manager < 1.4 - Cross-Site Request Forgery
Newsletter <= 3.2.6 - Reflected Cross-Site Scripting
EELV Newsletter <= 3.3.0 - Reflected Cross-Site Scripting
MailUp newsletter sign-up form < 1.3.2 - Cross-Site Scripting
MailUp newsletter sign-up form < 1.3.3 - Cross-Site Scripting
MailPoet Newsletters <= 2.2 - Multiple SQL Injections
Knews Multilingual Newsletters < 1.2.6 - Cross-Site Request Forgery
MailPoet Newsletters (Previous) <= 2.1.6 - Cross-Site Scripting
Plugin: Newsletter <= 1.5 - Arbitrary File Read
Newsletter Manager < 1.0.2 - Cross-Site Scripting
Newsletter Manager < 1.0.2 - Cross-Site Scripting via test_mail.php
SWFUpload <= 2.2.0.1 - Cross-Site Scripting
ShiftThis Newsletter <= 2.3.1 - SQL Injection
ShiftThis (Unspecified Version) - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.