Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Jenkins Docker Swarm Plugin stored cross-site scripting vulnerability
Jenkins Tuleap Authentication Plugin non-constant time token comparison
Jenkins Shortcut Job Plugin stored cross-site scripting vulnerability
Jenkins Flaky Test Handler Plugin stored cross-site scripting vulnerability
Jenkins Favorite View Plugin cross-site request forgery vulnerability
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Jenkins Blue Ocean Plugin cross-site request forgery vulnerability
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Jenkins Folders Plugin cross-site request forgery vulnerability
Jenkins Folders Plugin information disclosure vulnerability
Jenkins Folders Plugin cross-site request forgery vulnerability
Video Gallery & Management <= 3.3.5 - Cross-Site Request Forgery
WooCommerce Dynamic Pricing and Discount Rules <= 2.4.0 - Cross-Site Request Forgery
Fitness calculators plugin <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery
Custom Admin Login Page | WPZest <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Schedule Posts Calendar <= 5.2 - Cross-Site Request Forgery
Carrot <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP-PostRatings <= 1.91 - IP Spoofing
Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset
Schedule Posts Calendar <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Plausible Analytics <= 1.3.3 - Reflected Cross-Site Scripting via page-url
Accordion Slider <= 1.9.6 - Missing Authorization to Notice Dismissal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.