High
CVE-2025-69216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filters
High
CVE-2025-69214
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
High
CVE-2025-69215
OpenSTAManager has an SQL Injection in the Stampe Module
High
CVE-2025-69213
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
High
CVE-2026-25514
FacturaScripts has SQL Injection in Autocomplete Actions
High
CVE-2026-25513
FacturaScripts has SQL Injection in API ORDER BY Clause
Medium
CVE-2025-70958
Subrion CMS vulnerable to cross-site scripting
Medium
CVE-2026-25522
Craft Commerce has Stored XSS in Shipping Zone (Name & Description) Fields Leading to Potential Privilege Escalation
Medium
CVE-2026-25490
Craft Commerce has Stored XSS in Inventory Location Address Leading to Potential Privilege Escalation
Medium
CVE-2026-25489
Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation
Medium
CVE-2026-25488
Craft Commerce has Stored XSS in Tax Categories (Name & Description) Fields Leading to Potential Privilege Escalation
Medium
CVE-2026-25487
Craft CMS has Stored XSS in Tax Rates Name Leading to Potential Privilege Escalation
Medium
CVE-2026-25486
Craft Commerce has Stored XSS in Shipping Methods Name Field Leading to Potential Privilege Escalation
Medium
CVE-2026-25485
Craft Commerce has Stored XSS in Shipping Categories (Name & Description) Fields Leading to Potential Privilege Escalation
Medium
CVE-2026-25483
Craft Commerce has Stored XSS via Order Status Message with potential database exfiltration
Critical
CVE-2026-25510
CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
High
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
Low
CVE-2026-26188
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
Low
ghsa-58q2-9x27-h2jm
solspace/craft-freeform Has a DoS Vulnerability
High
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Medium
CVE-2022-50807
Concrete5 CMS contains an XPath injection vulnerability
Medium
CVE-2026-22242
CoreShop Vulnerable to SQL Injection via Admin Reports
High
CVE-2025-68455
Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.