High
CVE-2025-48164
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-60190
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-52735
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-5120
smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module
Critical
CVE-2025-60195
Atarim <= 4.2.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-8104
Memory Usage <= 3.98 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function
High
CVE-2025-8101
Linkify Allows Prototype Pollution & HTML Attribute Injection (XSS)
Medium
CVE-2025-8113
Ebook Store <= 5.8014 - Reflected Cross-Site Scripting
Medium
CVE-2025-54380
Opencast still publishes global system account credentials
High
CVE-2025-54378
HAX CMS API Lacks Authorization Checks
Medium
CVE-2025-5529
Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-6989
Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
High
CVE-2025-8198
MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation
Critical
CVE-2025-6895
MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function
Medium
CVE-2025-8103
WPeMatico RSS Feed Fetcher <= 2.8.7 - Cross-Site Request Forgery to Plugin Deactivation via handle_feedback_submission Function
High
CVE-2025-54385
XWiki Platform vulnerable to SQL injection through XWiki#searchDocuments API
Critical
CVE-2025-54369
Node-SAML SAML Authentication Bypass
High
CVE-2025-8183
NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS
High
CVE-2025-6991
Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-8097
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
High
CVE-2025-48298
SEOPress for MainWP <= 1.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6987
Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-48293
Geo Mashup <= 1.13.16 - Unauthenticated Local File Inclusion
Medium
CVE-2025-7501
Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.