Medium
CVE-2025-22775
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22778
Lijit Search <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12240
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
High
CVE-2025-0394
Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function
Medium
CVE-2024-13156
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
Medium
CVE-2025-0393
Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2024-12365
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
Medium
CVE-2024-11734
Denial of Service in Keycloak Server via Security Headers
Medium
CVE-2024-11736
Keycloak allows unrestricted admin use of system and environment variables
Medium
CVE-2025-23026
jte's HTML templates containing Javascript template strings are subject to XSS
Low
ghsa-mgr7-5782-6jh9
The Umbraco Heartcore headless client library uses a vulnerable Refit dependency package
Medium
CVE-2024-11396
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
Medium
CVE-2025-22791
offset writing <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22795
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22794
World Cup Predictor <= 1.9.6 - Reflected Cross-Site Scripting
Critical
CVE-2024-12919
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
Medium
CVE-2025-22788
CoDesigner WooCommerce Builder for Elementor <= 4.21 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-22792
Js O3 Lite <= 1.5.8.2 - Reflected Cross-Site Scripting
High
CVE-2025-22784
Background Control <= 1.0.5 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2025-22785
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Medium
CVE-2024-12008
W3 Total Cache <= 2.8.1 Information Exposure via Log Files
Medium
CVE-2025-22798
Responsive jQuery Slider <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-51800
Homey <= 2.4.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22787
Button Block <= 1.1.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.