High
CVE-2025-47663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Critical
CVE-2025-39485
Grand Tour | Travel Agency WordPress <= 5.5.1 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39503
Goodlayers Hotel <= 3.1.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-46259
The Plus Addons for Elementor Pro <= 6.3.6 - Missing Authorization
Medium
CVE-2025-47613
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-39502
Goodlayers Hostel <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-48143
Formulario de contacto SalesUp! <= 1.0.14 - Reflected Cross-Site Scripting
Critical
CVE-2025-39500
Goodlayers Hostel <= 3.1.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-31636
WP Post Modules for Elementor <= 2.5.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-39495
Avantage <= 2.4.9 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39499
Medicare <= 2.1.0 - Unauthenticated PHP Object Injection
High
CVE-2025-4840
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
High
CVE-2025-31924
Crafts & Arts <= 2.5 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-47949
samlify SAML Signature Wrapping attack
Medium
CVE-2025-47946
Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes
High
CVE-2025-47944
Multer vulnerable to Denial of Service from maliciously crafted requests
High
CVE-2025-47935
Multer vulnerable to Denial of Service via memory leaks from unclosed streams
High
CVE-2025-47934
OpenPGP.js's message signature verification can be spoofed
Critical
CVE-2025-4322
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
Medium
CVE-2025-47948
Cocotais Bot has builtin .echo command injection
Low
CVE-2025-47931
LibreNMS stored Cross-site Scripting vulnerability in poller group name
Medium
CVE-2025-26621
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that wi
High
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
Medium
CVE-2025-48234
Ultimate Blocks <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.