Medium
CVE-2025-2109
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-2542
Your Simple SVG Support <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2025-2635
Digital License Manager <= 1.7.3 - Reflected Cross-Site Scripting via remove_query_arg Function
High
CVE-2024-13690
WP Church Donation <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13731
Alert Box Block – Display notice/alerts in the front end <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box Block
Medium
CVE-2025-2510
Frndzk Expandable Bottom Bar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via text Parameter
High
CVE-2025-2319
EZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2024-13710
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-22223
Spring Security Vulnerable to Authorization Bypass via Security Annotations
Medium
CVE-2025-1320
teachPress <= 9.0.9 - Cross-Site Request Forgery to Import Delete
Medium
CVE-2025-23204
API Platform Core does not call GraphQl securityAfterResolver
Low
ghsa-5pq3-h73f-66hr
AWS CDK CodePipeline: trusted entities are too broad
Medium
CVE-2025-2689
yiisoft Yii2 Deserialization of Untrusted Data
Medium
CVE-2025-2699
GetmeUK ContentTools Cross-Site Scripting (XSS)
Medium
CVE-2025-30549
Yummly Rich Recipes <= 4.2 - Cross-Site Request Forgery
Critical
CVE-2025-2563
User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-30529
Auto Load Next Post <= 1.5.14 - Cross-Site Request Forgery
Medium
CVE-2025-30555
WordPres 同步微博 <= 1.1.0 - Cross-Site Request Forgery
Medium
CVE-2025-28855
Teleport <= 1.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-26732
StoreBiz <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25100
Cazamba <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-30574
Mobile Navigation <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30568
Super Static Cache <= 3.3.5 - Cross-Site Request Forgery
Medium
CVE-2025-30551
Pretty file links <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.