Medium
CVE-2025-5336
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
High
CVE-2025-4200
Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-4187
UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read
Medium
CVE-2025-6062
Yougler Blogger Profile Page <= v1.01 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-6063
XiSearch bar <= 2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-6064
WP URL Shortener <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-6055
Zen Sticky Social <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-6040
Easy Flashcards <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-4216
DIOT SCADA with MQTT <= 1.0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-4592
AI Image Lab – Free AI Image Generator <= 1.0.6 - Cross-Site Request Forgery to API Key Update
Medium
CVE-2025-6061
kk Youtube Video <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-6065
Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-6070
Restrict File Access <= 1.1.2 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2025-5487
AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions
High
CVE-2025-3234
File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2025-46096
Solon Vulnerable to Directory Traversal
Medium
ghsa-9qv6-4pwm-m68f
Ibexa RichText Field Type XSS vulnerabilities in back office
Medium
ghsa-5r6x-g6jv-4v87
Ibexa Admin UI XSS vulnerabilities in back office
Medium
ghsa-vhgq-r8gx-5fpv
Ibexa Admin UI assets XSS vulnerabilities in back office
Medium
ghsa-r5rx-53g9-25rj
Ibexa eZ Platform Admin UI assets XSS vulnerabilities in back office
Medium
ghsa-r7pm-mw8g-p7px
Ibexa eZ Platform Admin UI XSS vulnerabilities in back office
Critical
CVE-2025-28389
Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.
Critical
CVE-2025-28384
An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.
High
CVE-2025-28382
An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.