Medium
CVE-2025-22356
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Critical
CVE-2024-13790
MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion
High
CVE-2024-12920
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions
Medium
CVE-2025-23459
NS Simple Intro Loader <= 2.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-23543
FOMO Pay Chinese Payment Solution <= 2.0.4 - Reflected Cross-Site Scripting
High
CVE-2025-22501
Improve My City <= 1.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-23460
RWS Enquiry And Lead Follow-up <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23458
Ads24 Lite <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-13442
Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2025-23469
Sleekplan <= 0.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23546
RDP inGroups+ <= 1.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-23466
Site Editor Google Map <= 1.0.1 - Reflected Cross-Site Scripting
High
CVE-2024-13412
CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler
Critical
CVE-2024-13410
CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler
Medium
CVE-2025-2290
LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashing
High
CVE-2024-13933
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions
Medium
CVE-2025-22767
GlobalPayments WooCommerce <= 1.13.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22575
SUPER RESPONSIVE SLIDER <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-23542
RDP Linkedin Login <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-29788
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Unrated
pysec-2025-8
After the owner removed the project from PyPI, another user uploaded a new version with non-working code
Low
CVE-2025-1398
Mattermost Desktop App allows the bypass of Transparency, Consent, and Control (TCC) via code injection
High
ghsa-v432-7f47-9g94
PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash
High
CVE-2025-2368
A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.