Medium
CVE-2025-53286
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
High
CVE-2025-23967
GG Bought Together for WooCommerce <= 1.0.2 - Unauthenticated SQL Injection
High
CVE-2025-53303
ThemeMove Core <= 1.4.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60215
Kriya <= 3.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60212
VEDA <= 4.2 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-53283
Drop Uploader for CF7 - Drag&Drop File Uploader Addon <= 2.4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2025-53252
Zegen <= 1.1.9 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-6547
pbkdf2 silently disregards Uint8Array input, returning static keys
Critical
CVE-2025-6545
pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
Critical
CVE-2025-2828
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.Requests
High
CVE-2025-52882
Claude Code Improper Authorization via websocket connections from arbitrary origins
Medium
CVE-2025-49574
Quarkus potentially leaks data when duplicating a duplicated context
Medium
CVE-2025-5258
Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Medium
CVE-2025-52967
gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.
Unrated
828
JS Jobs - XSS (Cross Site Scripting)
High
CVE-2025-52826
Sala <= 1.1.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-52774
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-52778
xili-dictionary <= 2.12.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-49290
Off-Canvas Sidebars & Menus (Slidebars) <= 0.5.8.4 - Reflected Cross-Site Scripting
High
CVE-2025-30992
Puca <= 2.6.33 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32297
Simple Link Directory < 14.8.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-28993
Content No Cache <= 0.1.4 - Unauthenticated Arbitrary Function Call
Medium
CVE-2025-52799
LMS <= 9.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-49321
Eventin <= 4.0.28 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.