Kritisch
CVE-2025-4322
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.741
Mittel
CVE-2025-47948
Cocotais Bot has builtin .echo command injection
Niedrig
CVE-2025-47931
LibreNMS stored Cross-site Scripting vulnerability in poller group name
Mittel
CVE-2025-26621
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that wi
Hoch
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
Mittel
CVE-2025-48234
Ultimate Blocks <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-48246
The Events Calendar <= 6.11.2.1 - Missing Authorization
Mittel
CVE-2025-48282
Majestic Support <= 1.1.0 - Missing Authorization
Mittel
CVE-2025-48277
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mittel
CVE-2025-48263
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2025-32292
Jarvis – Night Club, Concert, Festival WordPress <= 1.8.11 - Unauthenticated PHP Object Injection
Mittel
CVE-2025-48344
Rootspersona <= 3.7.5 - Cross-Site Request Forgery
Mittel
CVE-2025-48265
Year Make Model Search for WooCommerce <= 1.0.11 - Cross-Site Request Forgery
Mittel
CVE-2025-48276
Visual Composer Website Builder <= 45.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2025-39489
CouponXL <= 4.5.0 - Unauthenticated Privilege Escalation
Mittel
CVE-2025-39368
Rootspersona <= 3.7.5 - Missing Authorization
Mittel
CVE-2024-5878
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library
Mittel
CVE-2025-48239
Product Notes Tab & Private Admin Notes for WooCommerce <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-48269
WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-48253
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-48240
Cost of Goods for WooCommerce <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-48256
Import Social Events <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-31054
Bloggie <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2025-48238
AWcode Toolkit <= 1.0.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.