Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Jenkins Priority Sorter Plugin has a CSRF vulnerability
Jenkins External Workspace Manager Plugin has a path traversal vulnerability
Jenkins Contrast Continuous Application Security Plugin has a missing permission check
Jenkins EC2 Fleet Plugin has a missing permission check
Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs
Jenkins Active Directory Plugin has an LDAP injection vulnerability
Jenkins Git client Plugin has an OS command injection vulnerability on agents
Jenkins Script Security Plugin has a script security bypass vulnerability
Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types
Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names
Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations
Jenkins Script Security Plugin sandbox bypass vulnerability
Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability
Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute
Malicious code in ensmallen (PyPI)
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
Customer Reviews for WooCommerce <= 5.110.1 - Unauthenticated Stored Cross-Site Scripting
Shibboleth <= 2.5.3 - Unauthenticated Administrator Account Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.