Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filtersAdvanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'
Advanced Contact form 7 DB <= 2.0.9 - Missing Authorization
Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion
Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure
Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure
Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)
Advanced Contact form 7 DB <= 1.8.7 - Stored Cross-Site Scripting
Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection
Advanced Contact form 7 DB <= 1.6.0 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.