High
CVE-2025-58708
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-58214
Indutri < 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58949
Spock <= 1.17 - Unauthenticated Local File Inclusion
High
CVE-2025-60236
Creatify <= 1.5 - Unauthenticated PHP Object Injection
High
CVE-2025-58706
Woo Hoo <= 1.25 - Unauthenticated Local File Inclusion
High
CVE-2025-60237
Finag <= 1.5.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-58638
Institutions Directory <= 1.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-62894
ACF Recent Posts Widget <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-58710
Hotel Listing <= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-62010
Famita <= 1.54 - Unauthenticated Local File Inclusion
High
CVE-2025-60076
Ray Enterprise Translation <= 1.7.1 - Unauthenticated Local File Inclusion
High
CVE-2025-58948
Aromatica <= 1.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-53573
Epic Review <= 1.0.2 - Reflected Cross-Site Scripting
High
CVE-2025-58215
Ziston < 1.4.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-57752
Next.js Affected by Cache Key Confusion for Image Optimization API Routes
Medium
CVE-2025-55173
Next.js Content Injection Vulnerability for Image Optimization
Medium
CVE-2025-57822
Next.js Improper Middleware Redirect Handling Leads to SSRF
Medium
CVE-2025-43773
Liferay Portal allows improper access through the expandoTableLocalService
High
CVE-2023-41471
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKE
Medium
CVE-2025-9500
TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter
Medium
CVE-2025-9499
Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode
Low
CVE-2025-55202
Opencast has a partial path traversal vulnerability in UI config
Medium
CVE-2025-9654
AiondaDotCom mcp-ssh command injection vulnerability in SSH operations
Medium
CVE-2025-9618
Related Posts Lite <= 1.12 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.