Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filtersFeatured Image from URL (FIFU) Free & Premium <= 6.0.7 - Cross-Site Request Forgery
Featured Image from URL (FIFU) <= 5.3.3 - Authenticated (Contributor+) Stored Cross-site Scripting
Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
Featured Image from URL <= 4.8.2 - Missing Authorization
Featured Image from URL <= 4.8.1 - Missing Authorization
Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text
Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting
Featured Image from URL (FIFU) <= 3.9.9 - Cross-Site Request Forgery
Featured Image from URL <= 2.7.7 - Missing Authorization on REST API routes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.