High
CVE-2025-64131
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2025-64134
Jenkins JDepend Plugin vulnerable to XML external entity attacks
Medium
CVE-2025-64132
Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools
Medium
CVE-2025-64145
Jenkins ByteGuard Build Actions Plugin does not mask API tokens displayed on the job configuration form
Medium
CVE-2025-64133
Jenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgery
Medium
CVE-2025-62798
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
Medium
ghsa-5jpx-9hw9-2fx4
NextAuthjs Email misdelivery Vulnerability
Medium
CVE-2025-11632
Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Medium
CVE-2025-49341
PDF Creator Lite <= 1.2 - Cross-Site Request Forgery
High
CVE-2025-64207
Jannah <= 7.6.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-6324
Easy Invoice <= 2.0.9 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-64206
Jannah <= 7.6.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-10008
Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion
High
CVE-2025-62076
Simple Payment <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-67561
Debug Log Viewer <= 2.0.3 - Missing Authorization
Medium
CVE-2025-57931
Popup box <= 5.5.4 - Cross-Site Request Forgery
Medium
CVE-2025-64296
Facebook for WooCommerce <= 3.5.7 - Missing Authorization to Unauthenticated Notification Dismissal
Medium
CVE-2025-11881
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Critical
CVE-2025-12057
WavePlayer <= 3.7.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-11627
Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning
Medium
CVE-2025-49042
WooCommerce <= 10.0.2 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2025-63064
EventON Pro <= 4.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-62075
Simple Payment <= 2.4.6 - Unauthenticated Local File Inclusion
High
CVE-2025-64205
Jannah <= 7.6.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.