Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 42
Reset filtersPost Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.4 - Authenticated (Contributor+) Stored Cross=Site Scripting
WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inisev Analyst Module <= Various Versions - Missing Authorization
PostX – Gutenberg Blocks for Post Grid <= 3.2.3 - Incorrect Authorization
Ultimate Posts Widget <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
PostX - Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type'
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
PostX – Gutenberg Blocks for Post Grid <= 2.9.9 - Unauthenticated Cross-Site Scripting
Freemius SDK <= 2.4.2 - Missing Authorization Checks
PostX Gutenberg Blocks Saved Templates Addon <= 2.4.9 - Private Content Disclosure
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Unauthorized Access Controls
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.