Medium
CVE-2025-47226
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,069
Reset filters
Critical
CVE-2025-46337
SQL injection in ADOdb PostgreSQL driver pg_insert_id() method
Critical
CVE-2025-0520
ShowDoc unrestricted file upload vulnerability
Low
CVE-2025-46346
YesWiki Stored XSS Vulnerability in Comments
High
CVE-2025-46347
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
Critical
CVE-2025-46348
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
High
CVE-2025-46349
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Low
CVE-2025-46350
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Medium
CVE-2025-46550
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Medium
CVE-2025-46549
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Medium
CVE-2025-3647
Moodle allows IDOR when accessing the cohorts report
Low
CVE-2025-3637
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter
Medium
CVE-2025-3645
Moodle has an IDOR in messaging web service which allows access to some user details
Medium
CVE-2025-3640
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
High
CVE-2025-3642
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Medium
CVE-2025-3644
Moodle's AJAX section delete does not respect course_can_delete_section()
High
CVE-2025-3641
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
Medium
CVE-2025-3643
Moodle has reflected Cross-site Scripting risk in policy tool
Medium
CVE-2025-3636
Moodle allows IDOR in RSS block, which allows access to additional RSS feeds
Low
CVE-2025-3635
Moodle has a CSRF risk in user tours manager that allows tour duplication
Low
CVE-2025-3638
Moodle has a CSRF risk in Brickfield tool's analysis request action
Medium
CVE-2025-3628
Moodle reveals student identities through assignment submissions search on anonymous submissions
Medium
CVE-2025-3627
Moodle makes some user data available before completing second factor with MFA enabled
Medium
CVE-2025-32045
Moodle shows hidden grades to users without permission on some grade reports
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.