Medium
CVE-2025-68856
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-14795
Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist
Medium
CVE-2025-68880
Simple Archive Generator <= 5.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-68843
FeedWordPress Advanced Filters <= 0.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-14865
Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2026-1056
Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal
Medium
CVE-2025-68895
AhaChat Messenger Marketing <= 1.1 - Authentication Bypass
High
CVE-2025-68844
Membee Login <= 2.3.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-67975
aDirectory <= 3.0.3 - Missing Authorization
Medium
CVE-2025-69297
Aardvark <= 2.19 - Missing Authorization
Medium
CVE-2025-69323
Slimstat Analytics <= 5.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-69296
Aardvark <= 4.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-68842
Widget Logic Visual <= 1.52 - Reflected Cross-Site Scripting
High
CVE-2026-22340
WPJobster <= 6.3.5 - Unauthenticated SQL Injection
Critical
ghsa-cr3w-cw5w-h3fj
Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE
High
CVE-2026-24400
AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion
Medium
CVE-2025-14969
Hibernate Reactive Vulnerable to DoS via Connection Pool Exhaustion
Low
CVE-2026-1190
Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods
Medium
CVE-2026-24131
pnpm has Path Traversal via arbitrary file permission modification
Medium
CVE-2026-23888
pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
Medium
CVE-2026-23889
pnpm has Windows-specific tarball Path Traversal
Medium
CVE-2026-23890
pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin
Medium
CVE-2026-24056
pnpm has symlink traversal in file:/git dependencies
Critical
CVE-2026-22709
vm2 has a Sandbox Escape
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.