Medium
CVE-2025-62927
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2025-62928
SEO Meta Description Updater <= 1.2.0 - Missing Authorization
Medium
CVE-2025-63073
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62926
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62925
Conversios.io <= 7.2.13 - Missing Authorization
Medium
CVE-2025-43825
Liferay Portal exposes sensitive user data through its Freemarker template
Medium
CVE-2025-62918
IgnitionDeck <= 2.0.10 - Missing Authorization
Medium
CVE-2025-62922
Export Categories <= 1.0 - Missing Authorization
Medium
CVE-2025-62923
Marquee Addons for Elementor <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62919
TS Demo Importer <= 0.1.2 - Missing Authorization
High
CVE-2025-63074
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-62921
Bulk Auto Image Title Attribute <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62920
USERCENTRICS CMP <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-66058
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Medium
CVE-2025-62924
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Medium
CVE-2025-29192
Flowise Stored XSS vulnerability through logs in chatbot
Critical
CVE-2025-50538
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Medium
CVE-2025-71331
Flowise vulnerable to XSS
High
CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Medium
CVE-2025-10383
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-9952
Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-10746
Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization
Low
CVE-2025-59829
Claude Code permission deny bypass through symlink
High
CVE-2025-59536
Claude Code can execute commands prior to the startup trust dialog
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.