Medium
CVE-2025-55155
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
Exploited in attacks
CVE-2025-11953
@react-native-community/cli has arbitrary OS command injection
Medium
CVE-2025-46556
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
High
CVE-2025-47776
MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling
Medium
CVE-2025-12400
LMB^Box Smileys <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-11733
Footnotes Made Easy <= 3.0.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-11812
Reuse Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-12452
Visit Counter 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-11758
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure
Medium
CVE-2025-11753
Multi-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-12389
Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
High
CVE-2025-11890
Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass
Medium
CVE-2025-12393
Free Quotation <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-10896
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Medium
CVE-2025-12456
Centangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting
Medium
CVE-2025-12396
Clubmember <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-12156
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.3.4 - Missing Authorization to Authenticated (Subscriber+) Post Creation
Medium
CVE-2025-12410
SH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-12402
LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-12416
Pagerank Tools <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-12413
Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Update
High
CVE-2025-11724
EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-11704
Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-12415
MapMap <= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.