Medium
CVE-2025-64243
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-13153
Logo Slider <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68084
Ultimate Auction <= 4.3.2 - Missing Authorization
Medium
CVE-2025-64242
Easy Property Listings <= 3.5.22 - Missing Authorization
High
CVE-2025-67522
Jobmonster <= 4.8.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-66126
Fix Media Library <= 2.0 - Unauthenticated Information Exposure
Medium
CVE-2025-13456
Shopbuilder <= 3.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-12685
WPBookit <= 1.0.7 - Cross-Site Request Forgery to Customer Deletion
Medium
CVE-2025-67466
Trinity Audio <= 5.23.3 - Missing Authorization
Medium
ghsa-w37m-7fhw-fmv9
Next Server Actions Source Code Exposure
High
ghsa-mwv6-3258-q52c
Next Vulnerable to Denial of Service with Server Components
High
CVE-2025-55184
Denial of Service Vulnerability in React Server Components
Medium
CVE-2025-55183
Source Code Exposure Vulnerability in React Server Components
Medium
CVE-2025-12965
Magical Posts Display <= 1.2.54 - Authenticated (Author+) Stored Cross-Site Scripting via Magical Posts Accordion Widget
Medium
CVE-2025-14065
Simple Bike Rental <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Booking Data Exposure
Medium
CVE-2025-12407
Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion
Medium
CVE-2025-12408
Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure
Critical
CVE-2025-13780
pgadmin4 has a Meta-Command Filter Command Execution
Medium
CVE-2025-14030
AI Feeds <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aife_post_meta' Shortcode
Medium
CVE-2025-14442
Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File
Medium
CVE-2025-14159
Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export
Medium
CVE-2025-12348
Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution
Medium
CVE-2025-14074
PDF for Contact Form 7 + Drag and Drop Template Builder <= 6.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication
Medium
CVE-2025-13993
MailerLite – Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.