High
CVE-2025-64207
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-6324
Easy Invoice <= 2.0.9 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-64206
Jannah <= 7.6.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-10008
Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion
High
CVE-2025-62076
Simple Payment <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-67561
Debug Log Viewer <= 2.0.3 - Missing Authorization
Medium
CVE-2025-57931
Popup box <= 5.5.4 - Cross-Site Request Forgery
Medium
CVE-2025-64296
Facebook for WooCommerce <= 3.5.7 - Missing Authorization to Unauthenticated Notification Dismissal
Medium
CVE-2025-11881
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Critical
CVE-2025-12057
WavePlayer <= 3.7.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-11627
Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning
Medium
CVE-2025-49042
WooCommerce <= 10.0.2 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2025-63064
EventON Pro <= 4.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-62075
Simple Payment <= 2.4.6 - Unauthenticated Local File Inclusion
High
CVE-2025-64205
Jannah <= 7.6.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-63059
Ninja Popups <= 4.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-11587
Call Now Button <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update
Medium
CVE-2025-62796
PrivateBin is missing HTML sanitization of attached filename in file size hint
Medium
CVE-2025-40843
CodeChecker has a buffer overflow in the log command
Medium
CVE-2025-62784
InventoryGui allows item duplication in GUIs which use GuiStorageElement
High
CVE-2025-59837
Astro's bypass of image proxy domain validation leads to SSRF and potential XSS
Medium
CVE-2025-11705
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2025-12390
Keycloak vulnerable to session takeovers due to reuse of session identifiers
Medium
CVE-2025-62171
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.