Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41
Reset filtersNewsletters <= 4.18 - Authenticated (Administrator+) SQL Injection
Newsletters < 4.17 - Cross-Site Request Forgery
Newsletters < 4.17 - Insufficient Authorization
Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
Newsletters <= 4.15 - Unauthenticated PHP Object Injection
Newsletters <= 4.15 - Unauthenticated API Authorization Bypass via Type Juggling
Newsletters <= 4.15 - Unauthenticated Server-Side Request Forgery
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
Newsletters <= 4.14 - Unauthenticated Stored Cross-Site Scripting
Newsletters <= 4.13 - Missing Authorization
Newsletters <= 4.14 - Unauthenticated PHP Object Injection
Newsletters <= 4.13 - Missing Authorization
Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
Newsletters <= 4.11 - Unauthenticated PHP Object Injection
Newsletters <= 4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Newsletters <= 4.10 - Unauthenticated Local File Inclusion
Newsletters <= 4.10 - Cross-Site Request Forgery
Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion
Newsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parameter
Newsletters <= 4.9.9.7 - Authenticated (Administrator+) SQL Injection
Newsletters <= 4.9.9.7 - Unauthenticated Stored Cross-Site Scripting
Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.