Low
CVE-2025-2149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Critical
CVE-2025-1497
A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code.
Critical
CVE-2025-1661
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
Critical
CVE-2025-2152
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporte
High
CVE-2025-2151
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component F
High
CVE-2025-2148
A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tu
Medium
CVE-2024-13919
Laravel framework susceptible to reflected cross-site scripting
Medium
CVE-2024-13918
Laravel framework susceptible to reflected cross-site scripting
Medium
CVE-2025-1945
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Medium
CVE-2025-1944
Zip Exploit Crashes Picklescan But Not PyTorch
Medium
CVE-2024-13436
Appsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-2169
WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-13228
Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content
Medium
CVE-2025-0613
Photo Gallery by 10Web <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-1926
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification
Medium
CVE-2025-2123
GeSHi XSS possible in the get_var function of /contrib/cssgen.php
Medium
CVE-2025-27636
Apache Camel: Camel Message Header Injection via Improper Filtering
Medium
CVE-2025-26910
WPBookit <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13649
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13675
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-1323
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection
Medium
CVE-2025-1325
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction
High
CVE-2024-13908
SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-24043
Microsoft Security Advisory CVE-2025-24043 | WinDbg Remote Code Execution Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.