Medium
CVE-2025-59822
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-4760
WSO2 carbon-apimgt affected by an authenticated stored cross-site scripting (XSS) vulnerability
Medium
CVE-2025-59821
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
Low
CVE-2025-59546
DNN Vulnerable to Stored XSS Using Backend Admin Credentials
Critical
CVE-2025-59545
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Medium
CVE-2025-43814
Liferay Portal and DXP audit events record password reminder answers
Medium
CVE-2025-43806
Liferay Portal and DXP does not properly check permission with import and export tasks
Medium
CVE-2025-43810
Liferay Portal and DXP allows users to add a note to a different virtual instance
Medium
CVE-2025-59571
WorkScout-Core < 1.7.06 - Reflected Cross-Site Scripting
Medium
CVE-2025-54741
Super Blank <= 1.2.0 - Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-8594
Pz-LinkCard <= 2.5.6 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-59007
TF Woo Product Grid Addon For Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-59580
Goodlayers Core < 2.1.7 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2025-10357
Simple SEO <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
955b7d69-7921-4c79-9443-c494f5bba57d
Houzez Theme - Functionality <= 4.1.2 - Missing Authorization
High
CVE-2025-60216
Addison < 1.4.8 - Unauthenticated PHP Object Injection
Critical
CVE-2025-9054
MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'
Medium
CVE-2025-9353
Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-62020
VOD Infomaniak <= 1.5.11 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-58915
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-52773
HieCOR Payment Gateway Plugin <= 1.5.11 - Unauthenticated SQL Injection
High
26654f89-38ae-480c-9851-08a6bf0f6d84
Houzez Theme - Functionality <= 4.1.2 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2025-53324
Gutenify <= 1.5.7 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-49393
Sign-up Sheets <= 2.3.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.