Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filtersGEO Plugin by Squirrly SEO <= 14.2.2 - Unauthenticated Stored Cross-Site Scripting
GEO Plugin by Squirrly SEO <= 14.2.0 - Reflected Cross-Site Scripting
SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()
GEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization
SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations
SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection
SEO Plugin by Squirrly SEO <= 12.4.03 - Authenticated (Contributor+) SQL Injection
SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter
SEO Plugin by Squirrly SEO <= 12.4.07 - Missing Authorization
SEO Plugin by Squirrly SEO <= 12.3.20 - Authenticated (Editor+) Stored Cross-Site Scripting
SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter
SEO Plugin by Squirrly SEO <= 12.3.16 - Reflected Cross-Site Scripting
SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Squirrly SEO - Advanced Pack < 2.4.02 - Authenticated(Administrator+) SQL Injection
SEO Plugin by Squirrly SEO <= 12.1.20 - Missing Authorization
SEO Plugin by Squirrly SEO <= 12.1.20 - Reflected Cross-Site Scripting via 'page' and 'tab'
SEO Plugin by Squirrly SEO <= 12.1.10 - Authenticated (Contributor+) Arbitrary File Upload
SEO Plugin by Squirrly SEO <= 11.1.11 - Reflected Cross-Site Scripting
SEO Plugin by Squirrly SEO < 6.1.5 - Directory Traversal
SEO Plugin by Squirrly SEO < 6.1.5 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.