Medium
CVE-2025-62922
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-62923
Marquee Addons for Elementor <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62919
TS Demo Importer <= 0.1.2 - Missing Authorization
High
CVE-2025-63074
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-62921
Bulk Auto Image Title Attribute <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62920
USERCENTRICS CMP <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-66058
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Medium
CVE-2025-62924
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Medium
CVE-2025-29192
Flowise Stored XSS vulnerability through logs in chatbot
Critical
CVE-2025-50538
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Medium
CVE-2025-71331
Flowise vulnerable to XSS
High
CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Medium
CVE-2025-10383
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-9952
Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-10746
Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization
Low
CVE-2025-59829
Claude Code permission deny bypass through symlink
High
CVE-2025-59536
Claude Code can execute commands prior to the startup trust dialog
Medium
CVE-2025-11227
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure
Medium
CVE-2025-11228
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association
Critical
CVE-2025-9485
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
High
CVE-2025-9243
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
Medium
CVE-2025-9030
Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9029
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function
Medium
CVE-2025-8726
WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.