Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials
Missing permission check in Jenkins SCP publisher Plugin
Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin
Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials
Protection Mechanism Failure in Jenkins Doktor Plugin
Stored Cross-site Scripting vulnerability in Jenkins Team Views Plugin
Cross-Site Request Forgery in Jenkins dbCharts Plugin
Missing Authorization in Jenkins dbCharts Plugin
CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin
Improper Restriction of XML External Entity Reference in Jenkins Chef Sinatra
Missing permission check in Jenkins SWAMP Plugin allows capturing credentials
CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials
Simple Quotation <= 1.3.2 - Cross-Site Request Forgery
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser
Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results <= 1.1.0 - Missing Authorization to Arbitrary Options Update
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via IP
WP Voting Contest < 3.0 - Reflected Cross-Site Scripting
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via IP
WP Statistics <= 13.1.5 - Unauthenticated SQL Injection
Page Builder KingComposer <= 2.9.6 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.