Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Jenkins MATLAB Plugin XML External Entity vulnerability
Jenkins Google Compute Engine Plugin has incorrect permission checks
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
Jenkins MATLAB Plugin missing permission checks
Jenkins MATLAB Plugin cross-site request forgery vulnerability
drupal/xsendfile - SA-CONTRIB-2023-053
logback serialization vulnerability
Innovs HR <= 1.0.3.6 - Reflected Cross-Site Scripting
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload
Doofinder for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via tab
rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload
which template file <= 5.0.0 - Unauthenticated Cross-Site Scripting
Parallax Slider Block <= 1.2.5 - Authenticated (Author+) Stored Cross-Site Scripting
BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
10to8 Online Appointment Booking System <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Site Offline <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Pocket URLs <= 1.0.2 - Reflected Cross-Site Scripting
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
BestWebSoft's Like & Share <= 2.73 - Unauthenticated Password Protected Post Disclosure
HDW Player Plugin (Video Player & Video Gallery) <= 5.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.