High
CVE-2025-47935
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-47934
OpenPGP.js's message signature verification can be spoofed
Critical
CVE-2025-4322
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
Medium
CVE-2025-47948
Cocotais Bot has builtin .echo command injection
Low
CVE-2025-47931
LibreNMS stored Cross-site Scripting vulnerability in poller group name
Medium
CVE-2025-26621
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that wi
High
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
Medium
CVE-2025-48234
Ultimate Blocks <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48246
The Events Calendar <= 6.11.2.1 - Missing Authorization
Medium
CVE-2025-48282
Majestic Support <= 1.1.0 - Missing Authorization
Medium
CVE-2025-48277
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48263
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-32292
Jarvis – Night Club, Concert, Festival WordPress <= 1.8.11 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48344
Rootspersona <= 3.7.5 - Cross-Site Request Forgery
Medium
CVE-2025-48265
Year Make Model Search for WooCommerce <= 1.0.11 - Cross-Site Request Forgery
Medium
CVE-2025-48276
Visual Composer Website Builder <= 45.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-39489
CouponXL <= 4.5.0 - Unauthenticated Privilege Escalation
Medium
CVE-2025-39368
Rootspersona <= 3.7.5 - Missing Authorization
Medium
CVE-2024-5878
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library
Medium
CVE-2025-48239
Product Notes Tab & Private Admin Notes for WooCommerce <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48269
WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48253
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48240
Cost of Goods for WooCommerce <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48256
Import Social Events <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.