Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Jenkins AppSpider Plugin missing permission check
Jenkins Code Dx Plugin displays API keys in plain text
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Jenkins Ansible Plugin job configuration form does not mask variables
Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
glazedlists XML Deserialization vulnerability
Pimcore Cross-site Scripting vulnerability
WordPress Core < 6.2.1 - Directory Traversal
Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection
Photo Gallery by Ays <= 5.1.6 - Reflected Cross-Site Scripting
WordPress Core < 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Embed Discovery
OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation
Easing Slider <= 3.0.8 - Missing Authorization to Unauthenticated Settings Reset
WordPress Core < 6.2.1 - Insufficient Sanitization of Block Attributes
Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure
Multiple sparklewpthemes Themes (Various versions) - Missing Authorization to Arbitrary Plugin Activation
Zotpress <= 7.3.3 - Reflected Cross-Site Scripting
File Away <= 3.9.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Chaty <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Chaty <= 3.0.9 - Reflected Cross-Site Scripting
Ricerca smart and advanced search <= 1.0.15 - Cross-Site Request Forgery
Contact Form Email <= 1.3.37 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.