Critical
CVE-2025-6553
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Medium
CVE-2025-62941
Events Maker by dFactory <= 1.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62942
WP Mapbox GL JS Maps <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62946
Everest Backup <= 2.3.8 - Missing Authorization
Medium
CVE-2025-62943
Next Page, Not Next Post <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-11814
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-11533
WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation
Medium
CVE-2025-48088
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9496
Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode
Critical
CVE-2025-10283
BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE
Critical
CVE-2025-10284
BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
High
CVE-2025-11573
Amazon.IonDotnet is vulnerable to Denial of Service attacks
Medium
CVE-2025-62240
Liferay Portal is vulnerable to XSS through its Calendar Events parameters
High
CVE-2025-61928
Better Auth: Unauthenticated API key creation through api-key plugin
Medium
CVE-2025-62228
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
High
CVE-2025-71380
n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host
Critical
CVE-2025-61913
Flowise is vulnerable to arbitrary file write through its WriteFileTool
Critical
ghsa-m9mp-6x32-5rhg
scio is vunerable to Remote Command Execution through PyTorch
Medium
CVE-2025-53218
AppExperts <= 1.4.5 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-48098
Survey Maker <= 5.1.8.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-62029
Grevo <= 2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62937
Post List Featured Image <= 0.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49937
Smash Balloon Social Post Feed <= 4.3.2 - Missing Authorization
High
CVE-2025-62031
tagDiv Composer <= 5.4.1 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.