Medium
CVE-2025-12041
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-8383
Depicter <= 4.0.4 - Cross-Site Request Forgery
High
CVE-2025-10897
WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read
Critical
CVE-2025-5397
Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass
High
CVE-2025-7846
WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function
Medium
CVE-2025-62266
Liferay Portal is vulnerable to DNS rebinding attacks
High
CVE-2025-64112
Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation
Medium
CVE-2025-64118
node-tar has a race condition leading to uninitialized memory exposure
High
CVE-2025-62726
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Medium
CVE-2025-11806
Qzzr Shortcode Plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-11975
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Missing Authorization to Authenticated (Subscriber+) Sync Rule Creation
Medium
CVE-2025-62503
Apache Airflow's create action can upsert existing Pools/Connections/Variables
Medium
CVE-2025-54941
Apache Airflow has a command injection vulnerability in "example_dag_decorator"
Medium
CVE-2025-62402
Apache Airflow `/api/v2/dagReports` executes DAG Python in API
Medium
CVE-2025-62257
Liferay Portal vulnerable to password enumeration
High
CVE-2025-9954
drupal/acquia_dam - SA-CONTRIB-2025-105
High
CVE-2025-12466
drupal/simple_oauth - SA-CONTRIB-2025-114
Medium
CVE-2025-12083
drupal/civictheme - SA-CONTRIB-2025-113
Medium
CVE-2025-10926
drupal/json_field - SA-CONTRIB-2025-106
Medium
CVE-2025-10930
drupal/currency - SA-CONTRIB-2025-110
Low
CVE-2025-10931
drupal/umami_analytics - SA-CONTRIB-2025-109
Medium
CVE-2025-10928
drupal/access_code - SA-CONTRIB-2025-108
High
CVE-2025-12082
drupal/civictheme - SA-CONTRIB-2025-112
Medium
CVE-2025-10929
drupal/reverse_proxy_header - SA-CONTRIB-2025-111
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.