Critical
CVE-2025-3746
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-2880
Yame | Link In Bio <= 0.9.0 - Unauthenticated Information Exposure
Critical
CVE-2025-4094
Digits < 8.4.6.1 - Authentication Bypass via Weak OTP
Medium
CVE-2025-2524
Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2025-46454
Meta Keywords & Description <= 0.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-2560
Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2561
Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-2101
Edumall <= 4.2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-2105
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
Medium
CVE-2025-3915
Aeropage Sync for Airtable <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
High
CVE-2025-3914
Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-46474
SEUR Oficial <= 2.2.23 - Unauthenticated Local File Inclusion
Critical
CVE-2025-46468
Fable Extra <= 1.0.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-46535
Custom Login and Registration <= 1.0.0 - Missing Authorization
Medium
CVE-2025-46463
Mailing Group Listserv <= 3.0.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-1565
Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read
High
CVE-2025-1279
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-46473
Social Counter <= 2.0.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-46528
Availability Calendar <= 0.2.4 - Cross-Site Request Forgery
High
CVE-2025-46481
Flickr Shortcode Importer <= 2.2.3 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-46504
Vasaio QR Code <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-46513
All in One Time Clock Lite <= 1.3.325 - Cross-Site Request Forgery
Medium
CVE-2025-46533
Landing pages and Domain aliases for WordPress <= 0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-3300
WPMasterToolKit (WPMTK) – All in one plugin <= 2.5.2 - Authenticated (Administrator+) to Arbitrary File Read and Write
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.