Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filtersNewsletters <= 4.6.4.2 - Reflected Cross-Site Scripting
Newsletter by Supsystic < 1.1.8 - Cross-Site Request Forgery
EELV Newsletter <= 4.6.0 - Cross-Site Request Forgery
EELV Newsletter < 4.6.1 - Cross-Site Scripting
MailPoet Newsletters <= 2.7.2 - SQL Injection
MailPoet Newsletters <= 2.7.2 - Reflected Cross-Site Scripting
ALO EasyMail Newsletter <= 2.9.2 - Cross-Site Request Forgery
ALO EasyMail Newsletter <= 2.6.01 - Cross-Site Request Forgery
MailPoet Newsletters <= 2.6.19 - Reflected Cross-Site Scripting
Email Newsletter <= 20.13.6 - Reflected Cross-Site Scripting
ALO EasyMail Newsletter <= 2.6.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Email Subscribers & Newsletters < 2.9.1 - Cross-Site Scripting
SendPress Newsletters < 1.2 - Authenticated SQL Injection
SendPress Newsletters < 1.2 - Cross-Site Scripting
Email Newsletter <= 20.15 - Unauthenticated SQL Injection
Freshmail for WordPress <= 1.5.8 - SQL Injection
Freshmail <= 1.5.8 - Multiple SQL Injections
Newsletter <= 3.8.2 - Open Redirect
Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Newsletter Meenews <= 5.1.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.