High
CVE-2025-53260
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2025-53197
Cookiebot <= 4.5.8 - Cross-Site Request Forgery
High
CVE-2025-53281
WPB Category Slider for WooCommerce <= 1.71 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-53327
Aioseo Multibyte Descriptions <= 0.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-53320
Free Downloads EDD <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53293
Dashboard Widget Sidebar <= 1.2.3 - Missing Authorization
Medium
CVE-2025-53276
Omnipress <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-49549
Magento Authenticated Security feature bypass
Medium
CVE-2025-49550
Magento Security feature bypass
Critical
CVE-2025-50213
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.
Medium
CVE-2025-52573
iOS Simulator MCP Command Injection allowed via exec API
Medium
CVE-2025-6550
The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5940
Osom Blocks <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
Medium
CVE-2025-6689
FL3R Accessibility Suite <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via fl3raccessibilitysuite Shortcode
Medium
CVE-2025-4587
A/B Testing for WordPress <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5936
VR Calendar <= 2.4.7 - Cross-Site Request Forgery to Calendar Sync
Low
CVE-2025-6700
Xuxueli XXL-SSO Cross-site Scripting vulnerability
Low
CVE-2025-6701
XXL SSO is vulnerable to an Open Redirect through malicious manipulation of the redirect_url argument
Medium
CVE-2025-6488
isMobile <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via device Parameter
Low
CVE-2025-6624
Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode
Medium
CVE-2025-28978
SB Breadcrumbs <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-39487
Rankie <= 1.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-52776
Video List Manager <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2025-52828
Red Art <= 3.8 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.