Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Jenkins File Parameter Plugin arbitrary file write vulnerability
Jenkins Code Dx Plugin missing permission checks
Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
Jenkins Code Dx Plugin stores API keys in plain text
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
Jenkins AppSpider Plugin missing permission check
Jenkins Code Dx Plugin displays API keys in plain text
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Jenkins Ansible Plugin job configuration form does not mask variables
Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
glazedlists XML Deserialization vulnerability
Pimcore Cross-site Scripting vulnerability
WordPress Core < 6.2.1 - Directory Traversal
Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection
Photo Gallery by Ays <= 5.1.6 - Reflected Cross-Site Scripting
WordPress Core < 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Embed Discovery
OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation
Easing Slider <= 3.0.8 - Missing Authorization to Unauthenticated Settings Reset
WordPress Core < 6.2.1 - Insufficient Sanitization of Block Attributes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.