High
CVE-2026-65575
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 37
Reset filters
Medium
CVE-2026-4429
OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute
Medium
CVE-2026-33559
OSM – OpenStreetMap < 6.1.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-28059
Dermatology Clinic <= 1.4.3 - Unauthenticated Local File Inclusion
High
CVE-2025-67980
Hara <= 1.2.17 - Unauthenticated Local File Inclusion
Medium
CVE-2026-25323
OSM – OpenStreetMap <= 6.1.12 - Missing Authorization
High
CVE-2025-67532
Hara <= 1.2.17 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-12411
Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-58265
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53423
Triss <= 2.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-8619
OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Medium
CVE-2025-58210
Makeaholic <= 1.8.5 - Missing Authorization
Critical
CVE-2025-54700
Makeaholic <= 1.8.4 - Unauthenticated Local File Inclusion
High
CVE-2025-28990
SNS Vicky <= 3.7 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49259
Hara <= 1.2.10 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49255
Ruza <= 1.0.7 - Unauthenticated Local File Inclusion
High
CVE-2025-26592
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-31557
OSM – OpenStreetMap <= 6.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13674
Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22753
turboSMTP <= 4.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-12323
turboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-53745
소셜 공유 버튼 By 코스모스팜 <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-52355
OSM – OpenStreetMap <= 6.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8991
OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.