Medium
CVE-2025-1627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Medium
CVE-2025-3452
SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2025-2524
Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-1625
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Counter Block
Critical
CVE-2025-46454
Meta Keywords & Description <= 0.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-1626
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Block
Medium
CVE-2015-4582
Boot Store <= 1.6.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-2560
Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2561
Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-3985
Apereo CAS has inefficient regular expression complexity
Medium
CVE-2025-3986
Apereo CAS has inefficient regular expression complexity
Low
CVE-2025-3984
Apereo CAS code injection vulnerability
Low
CVE-2025-46653
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content
High
CVE-2025-2101
Edumall <= 4.2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-2105
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
High
CVE-2025-3491
Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution
High
CVE-2025-3906
Integração entre Eduzz e Woocommerce 1.5.0 - 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-3647
Moodle allows IDOR when accessing the cohorts report
Low
CVE-2025-3637
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter
Medium
CVE-2025-3645
Moodle has an IDOR in messaging web service which allows access to some user details
Medium
CVE-2025-3640
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
High
CVE-2025-3642
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Medium
CVE-2025-3644
Moodle's AJAX section delete does not respect course_can_delete_section()
High
CVE-2025-3641
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.