Medium
CVE-2025-62955
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2026-28070
eMember <= 10.2.2 - Missing Authorization
Medium
CVE-2025-11260
WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass
Medium
CVE-2025-59579
Simple Job Board <= 2.13.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-49935
WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-49909
Penci Bookmark & Follow < 2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31029
replyMail <= 1.2.0 - Cross-Site Request Forgery
High
CVE-2025-62047
Case Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-62954
Revive Old Posts <= 9.3.3 - Missing Authorization
Medium
CVE-2025-62365
LibreNMS is vulnerable to Reflected-XSS in `report_this` function
Medium
CVE-2025-62241
Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key
Medium
CVE-2025-62252
Liferay is Vulnerable to Authorization Bypass Through User-Controlled Key
Medium
CVE-2025-62246
Liferay Mentions Web is Vulnerable to Cross-site Scripting
Medium
CVE-2025-62242
Liferay Account Admin Web vulnerable to Authorization Bypass Through User-Controlled Key
Medium
CVE-2025-62244
Liferay Publications vulnerable to Authorization Bypass Through User-Controlled Key
Medium
CVE-2025-62243
Liferay Publications is vulnerable to Incorrect Authorization
Medium
CVE-2025-62378
CommandKit has incorrect command name exposure in context object for message command aliases
Medium
CVE-2025-10732
SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-11183
QGIS QWC2 Cross-Site Scripting vulnerability
High
CVE-2025-62045
TheGem Theme Elements (for WPBakery) <= 5.10.5.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62952
ChatBot <= 7.7.3 - Missing Authorization
Medium
CVE-2025-48085
Simple Stripe <= 0.9.17 - Cross-Site Request Forgery
Medium
CVE-2025-62046
TheGem Demo Import (for WPBakery) <= 5.10.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-48083
wpNamedUsers <= 0.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.