Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text
Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
WP VR <= 8.3.14 - Missing Authorization to Plugin Version Downgrade
Cube API denial of service attack
Insecure Direct Object Reference in extension "Content Consent" (content_consent)
Broken Access Control in extension "femanager"
Configuration Injection in extension "Direct Mail" (direct_mail)
Denial of service caused by infinite recursion when parsing SVG images
incorrect storage layout for contracts containing large arrays
Jenkins Nexus Platform Plugin missing permission check
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Jenkins Nexus Platform Plugin missing permission check
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Tokens stored in plain text by PaaSLane Estimate Plugin
Arbitrary file deletion vulnerability in Jenkins Scriptler Plugin
Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin
Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
Tokens stored in plain text by PaaSLane Estimate Plugin
Cross-site request forgery vulnerability in Jenkins Deployment Dashboard Plugin
Cross-site request forgery vulnerability in Jenkins HTMLResource Plugin
Missing permission check in Jenkins Scriptler Plugin
Cross-Site Request Forgery in Jenkins PaaSLane Estimate Plugin
Missing permission check in Jenkins PaaSLane Estimate Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.