Medium
CVE-2026-24957
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-69331
Theater for WordPress <= 0.19 - Missing Authorization
Medium
CVE-2025-69018
Web Directory Free <= 1.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69016
Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization
Medium
CVE-2025-68533
WC Builder <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69013
Stratum Widgets for Elementor <= 1.6.1 - Missing Authorization
High
CVE-2025-68537
Zota <= 1.3.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-69014
Youzify <= 1.3.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-69015
Crowdsignal Forms <= 1.7.2 - Missing Authorization
Medium
CVE-2025-69017
RestroPress <= 3.2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68513
Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69012
Event Organiser <= 3.12.8 - Missing Authorization
High
ghsa-rcfx-77hg-w2wv
FastMCP updated to MCP 1.23+ due to CVE-2025-66416
High
CVE-2024-42718
Croogo CMS has a path traversal vulnerability
Critical
CVE-2025-13158
apidoc-core has a prototype pollution vulnerability
High
CVE-2025-68697
Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
Critical
CVE-2025-68668
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
High
CVE-2025-61914
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox
High
CVE-2025-25341
libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)
Critical
CVE-2025-68860
Mobile builder <= 1.4.2 - Authentication Bypass
Medium
CVE-2025-69011
Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69008
Inboxify Sign Up Form <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-69010
Themebeez Toolkit <= 1.3.5 - Missing Authorization
Medium
CVE-2025-68519
Brands for WooCommerce <= 3.8.6.3 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.