High
CVE-2025-58619
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
High
CVE-2025-9216
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-9851
Appointmind <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58920
Cerato <= 2.2.18 - Reflected Cross-Site Scripting
Medium
CVE-2025-10188
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Cross-Site Request Forgery to Arbitrary Directory Deletion in /wp-content
Medium
CVE-2025-10042
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
High
CVE-2025-10143
Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-8394
Productive Style <= 1.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_productive_breadcrumb Shortcode
Medium
CVE-2025-53421
Accordion <= 2.3.14 - Missing Authorization
Medium
CVE-2025-9215
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2025-59331
is-arrayish@0.3.3 contains malware after npm account takeover
High
CVE-2025-59330
error-ex@1.3.3 contains malware after npm account takeover
High
CVE-2025-59162
color-convert@3.1.1 contains malware after npm account takeover
High
CVE-2025-59145
color-name@2.0.1 contains malware after npm account takeover
Medium
CVE-2025-43799
Liferay Portal Uses Default Password
Low
CVE-2025-43798
Liferay DXP Missing Critical Step in Authentication
Medium
CVE-2025-43800
Liferay Portal Cross-site Scripting (XSS) vulnerability
High
CVE-2025-59144
debug@4.4.2 contains malware after npm account takeover
High
CVE-2025-59143
color@5.0.1 contains malware after npm account takeover
High
CVE-2025-59142
color-string@2.1.1 contains malware after npm account takeover
High
CVE-2025-59141
simple-swizzle@0.2.3 contains malware after npm account takeover
High
CVE-2025-59140
backslash@0.2.1 contains malware after npm account takeover
Medium
CVE-2025-59155
HackMD MCP Server has Server-Side Request Forgery (SSRF) vulnerability
Medium
CVE-2025-9862
Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.