High
CVE-2025-49366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-58875
WP Github Gist <= 0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58834
short.io <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58863
Zoomify embed for WP <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58830
Parallax Scrolling Enllax.js <= 0.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-51586
Presta Shop vulnerable to email enumeration
High
CVE-2025-58179
Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter
Critical
ghsa-58p5-r2f6-g2cj
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Low
CVE-2025-58056
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions
Medium
ghsa-c7v7-rqfm-f44j
Vaadin Platform possible file bypass via upload validation on the server-side
Medium
ghsa-94g8-xv23-7656
Vaadin Flow Components possible file bypass via upload validation on the server-side
Medium
CVE-2025-9467
Vaadin Framework possible file bypass via upload validation on the server-side
Medium
CVE-2025-8684
Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2025-9990
WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion
High
CVE-2025-43772
Liferay Portal Vulnerable to Denial of Service in Kaleo Forms Admin
High
CVE-2025-60228
Knowledge Base <= 2.9 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-53437
Greenorganic <= 2.45 - Unauthenticated Local File Inclusion
High
CVE-2025-53430
Etta <= 1.14.0 - Unauthenticated Local File Inclusion
High
CVE-2025-60234
Single Property <= 2.8 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-53435
Plan My Day <= 1.1.13 - Unauthenticated Local File Inclusion
High
CVE-2025-53434
ChildHope <= 1.1.8 - Unauthenticated Local File Inclusion
High
CVE-2025-59554
Advanced Ads – Tracking < 3.0.7 - Unauthenticated SQL Injection
High
CVE-2025-60230
The Barber Shop <= 1.9 - Unauthenticated PHP Object Injection
High
CVE-2025-60229
Lagom <= 2.0 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.