Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filtersMautic has Stored Cross-Site Scripting (XSS) in Projects Component
Mautic has an Authorization Bypass in API v2 Endpoints
Mautic vulnerable to Path Traversal via Campaign Import
Mautic has Server-Side Template Injection (SSTI) in Theme Templates
Mautic Focus component Vulnerable to SSRF
Mautic has SQL Injection in API Contact Filtering
Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting
Mautic user without privileged access to the Marketplace can install and uninstall composer packages
Mautic Vulnerable to User Enumeration via Response Timing
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Mautic vulnerable to secret data extraction via elfinder
Mautic vulnerable to SSRF via webhook function
Mautic has an Open Redirect vulnerability on user unlock path.
Mautic segment cloning doesn't have a proper permission check
Mautic allows user name enumeration due to response time difference on password reset form
Mautic does not shield .env files from web traffic
Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure
Mautic allows Relative Path Traversal in assets file upload
Mautic allows Improper Authorization in Reporting API
Mautic allows Remote Code Execution and File Deletion in Asset Uploads
Mautic allows users enumeration due to weak password login
Mautic has insufficient authentication in upgrade flow
Mautic has an XSS in contact tracking and page hits report
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.