Medium
CVE-2025-65019
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
Medium
CVE-2024-4367
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Medium
CVE-2023-3620
WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
High
CVE-2023-28154
webpack JS package <= 5.75.0 - Sandbox Bypass
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
High
CVE-2022-25860
simple-git < 3.16.0 - Remote Code Execution
High
CVE-2022-46175
json5 <= 1.0.1 and 2.0.0-2.2.1 - Prototype Pollution
Critical
CVE-2022-25912
simple-git < 3.15.0 - Remote Code Execution
Low
CVE-2022-37599
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
CVE-2022-37603
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
Medium
CVE-2018-5158
pdf.js < 2.0.943 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2021-43307
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS)
High
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
High
CVE-2021-20083
WordPress Core < 5.9.1 - jQuery Prototype Pollution
Medium
CVE-2022-21670
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
High
CVE-2021-32770
Basic-auth app bundle credential exposure in gatsby-source-wordpress
Medium
CVE-2020-8203
WordPress Core < 5.8.1 - LoDash Update
High
CVE-2020-15092
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
Medium
Exploited in attacks
CVE-2020-11023
jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Critical
CVE-2018-9206
Tajer <= 1.0.5 - Arbitrary File Upload
High
CVE-2017-1000170
JQueryFileTree <= 2.1.5 - Directory Traversal
Medium
CVE-2016-4567
WordPress Core < 4.5.2 - Cross-Site Scripting via MediaElement.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.