Medium
CVE-2025-46260
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2025-46261
Seriously Simple Podcasting <= 3.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2025-39386
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection
Medium
CVE-2025-3814
Tax Switch for WooCommerce <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter
High
CVE-2025-3857
Infinite loop condition in Amazon.IonDotnet
High
CVE-2025-3616
Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-29287
MCMS allows arbitrary file uploads in the ueditor component
Low
CVE-2024-42699
OpenCMS Cross-Site Scripting vulnerability
Medium
CVE-2024-41446
OpenCMS cross-site scripting (XSS) vulnerability
Medium
CVE-2024-29643
croogo Host header injection
Critical
CVE-2025-32928
Altair <= 5.2.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-3597
Firelight Lightbox <= 2.3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-39354
Grand Conference <= 5.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-32924
Revy <= 2.1 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-39387
Opstore <= 1.4.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-39377
Appsero Helper <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-39356
Foodbakery Sticky Cart <= 3.2 - Unauthenticated PHP Object Injection
High
CVE-2025-39389
AnalyticsWP <= 2.1.2 - Unauthenticated SQL Injection
Medium
CVE-2025-39355
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-39348
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39359
CWW Portfolio <= 1.3.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-39349
CiyaShop <= 4.18.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-2839
WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Critical
CVE-2025-39379
Capturly <= 2.0.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.