Medium
CVE-2025-64285
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-46234
Control Listings <= 1.0.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-39376
Car Park Booking System for WordPress <= 2.6 - Missing Authorization
Medium
CVE-2025-46228
Event post <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46250
VForm <= 3.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-46227
Custom Related Posts <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46241
Appointment Booking Calendar <= 1.3.92 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2025-46232
Download Alt Text AI <= 1.9.93 - Missing Authorization
Medium
CVE-2025-46260
Sky Addons for Elementor <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46261
Seriously Simple Podcasting <= 3.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2025-39386
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection
Medium
CVE-2025-3814
Tax Switch for WooCommerce <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter
High
CVE-2025-3857
Infinite loop condition in Amazon.IonDotnet
High
CVE-2025-3616
Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-29287
MCMS allows arbitrary file uploads in the ueditor component
Low
CVE-2024-42699
OpenCMS Cross-Site Scripting vulnerability
Medium
CVE-2024-41446
OpenCMS cross-site scripting (XSS) vulnerability
Medium
CVE-2024-29643
croogo Host header injection
Critical
CVE-2025-32928
Altair <= 5.2.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-3597
Firelight Lightbox <= 2.3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-39354
Grand Conference <= 5.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-32924
Revy <= 2.1 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-39387
Opstore <= 1.4.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-39377
Appsero Helper <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.