Medium
CVE-2025-13140
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-64775
Apache Struts is Vulnerable to DoS via File Leak
Medium
CVE-2025-12483
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-13007
WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) <= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import
Medium
CVE-2025-13606
Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure
High
CVE-2025-13387
Kadence WooCommerce Email Designer <= 1.5.17 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-63523
FeehiCMS fails to enforce server-side immutability
Medium
CVE-2025-63520
FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function
Medium
CVE-2025-63522
FeehiCMS is vulnerable to reverse tabnabbing
Medium
CVE-2025-13697
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute
High
CVE-2025-12529
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-13806
NutzBoot Incorrect Privilege Assignment vulnerability
Low
CVE-2025-13804
NutzBoot vulnerable to information disclosure
Low
CVE-2025-13805
NutzBoot vulnerable to deserialization
Medium
CVE-2025-49041
Get Cash <= 3.2.3 - Missing Authorization
Medium
CVE-2025-13835
Arconix Shortcodes <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-13731
Nexter Extension <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-10019
Contact Form Email <= 1.3.60 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-13534
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Low
CVE-2025-13785
Skuul School Management System has a Sensitive Data Exposure Vulnerability in Uploaded Images
Low
CVE-2025-13784
yungifez Skuul School Management System vulnerable to XSS via SVG
Medium
CVE-2025-66421
Tryton sao allows XSS because it does not escape completion values
Medium
CVE-2025-66420
Tryton sao allows XSS via an HTML attachment
Medium
CVE-2025-66054
LearnPress <= 4.2.9.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.