Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
DoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api
Out-of-bounds Write in SixLabors ImageSharp
SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting
VK Blocks <= 1.94.2.2 - Missing Authorization to Sensitive Information Exposure
WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting
Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download
Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id
Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection
InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset
Django vulnerable to Allocation of Resources Without Limits or Throttling
NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page
EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export
ray vulnerable to Insertion of Sensitive Information into Log File
Jenkins cross-site request forgery (CSRF) vulnerability
Jenkins Open Redirect vulnerability
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Event Tickets with Ticket Scanner <= 2.5.3 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
IP Based Login <= 2.4.0 - Cross-Site Request forgery to Log Deletion
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.