Medium
CVE-2025-9217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-52759
Accordion FAQ <= 2.2.1 - Reflected Cross-Site Scripting
High
CVE-2025-9083
Ninja Forms <= 3.11.0 - Unauthenticated PHP Object Injection
High
CVE-2024-13342
Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload
Medium
CVE-2026-28131
Elementor Addon Elements <= 1.14.4 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-8942
WP Hotel Booking <= 2.2.1 - Improper Input Validation to Authenticated (Subscriber+) Rating Manipulation
High
CVE-2025-5305
Password Reset with Code <= 0.0.16 - Unauthenticated Privilege Escalation via Weak OTP Codes
Medium
CVE-2025-8147
LWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Function
Critical
CVE-2025-58050
The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matchin
High
CVE-2025-50979
NodeBB SQL Injection vulnerability
Medium
CVE-2025-6255
Dynamic AJAX Product Filters for WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Medium
CVE-2025-8073
Dynamic AJAX Product Filters for WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter
Unrated
CVE-2025-9554
drupal/owlcarousel2 - SA-CONTRIB-2025-104
Unrated
CVE-2025-9553
drupal/api_key_manager - SA-CONTRIB-2025-103
Unrated
CVE-2025-9552
drupal/sync_composer_with_contrib - SA-CONTRIB-2025-102
Unrated
CVE-2025-9551
drupal/protected_pages - SA-CONTRIB-2025-101
Unrated
CVE-2025-9550
drupal/facets - SA-CONTRIB-2025-100
Unrated
CVE-2025-9549
drupal/facets - SA-CONTRIB-2025-099
Unrated
CVE-2025-8093
drupal/alogin - SA-CONTRIB-2025-098
Medium
CVE-2025-7956
Ajax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler
Critical
CVE-2025-7955
RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentral_admin_login_2fa_verify Function
Critical
CVE-2025-52122
The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability
Medium
CVE-2024-9648
WP ULike Pro <= 1.9.3 - Unauthenticated Limited Arbitrary File Upload
Medium
CVE-2025-9345
File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.