Medium
CVE-2025-68896
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2025-68034
CleverReach® WP <= 1.5.21 - Unauthenticated SQL Injection
Medium
CVE-2026-25473
WZone <= 14.0.31 - Missing Authorization
Medium
CVE-2026-24596
Related Posts Thumbnails Plugin for WordPress <= 4.3.2 - Cross-Site Request Forgery
Medium
CVE-2026-22335
WooCommerce Frontend Manager – Ultimate < 6.7.7 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-68015
Event Tickets with Ticket Scanner <= 2.8.5 - Unauthenticated Remote Code Execution
Medium
CVE-2026-24599
NextMove Lite <= 2.23.0 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-68003
Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update
Medium
ghsa-595p-g7xc-c333
Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
Low
CVE-2026-24001
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
High
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Medium
CVE-2026-22036
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
Medium
CVE-2025-63644
pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability
Low
CVE-2025-14457
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion
Unrated
CVE-2026-0948
drupal/social_auth_entra_id - SA-CONTRIB-2026-005
Unrated
CVE-2026-0947
drupal/pianoanalytics - SA-CONTRIB-2026-004
Unrated
CVE-2026-0946
drupal/atsmarttag - SA-CONTRIB-2026-003
Unrated
CVE-2026-0945
drupal/role_delegation - SA-CONTRIB-2026-002
Unrated
CVE-2026-0944
drupal/ginvite - SA-CONTRIB-2026-001
Medium
CVE-2025-14448
WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
High
CVE-2026-23498
Shopware Has Improper Control of Generation of Code in Twig rendered views
High
CVE-2026-22787
html2pdf.js contains a cross-site scripting vulnerability
Critical
CVE-2026-22686
enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain
Medium
CVE-2025-66169
Apache Camel camel-neo4j component is vulnerable to cypher injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.