Medium
CVE-2025-22283
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-26584
TBTestimonials <= 1.7.3 - Reflected Cross-Site Scripting
High
CVE-2024-10942
All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection
Medium
CVE-2024-13887
Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition
Medium
CVE-2025-27617
Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Medium
CVE-2025-25302
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to t
High
CVE-2025-25301
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker m
Medium
CVE-2025-48958
Froxlor has an HTML Injection Vulnerability
Medium
CVE-2025-29773
Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover
Medium
CVE-2025-27789
Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
High
CVE-2025-24070
Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability
High
CVE-2025-27773
The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding
Medium
CVE-2025-24986
Azure PromptFlow remote code execution related to Jinja templates
High
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Medium
CVE-2025-27602
Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
Medium
CVE-2025-27601
Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality
Medium
CVE-2025-2078
BlogBuzzTime-for-wp <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-1508
WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download
Medium
CVE-2025-2076
binlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2077
Simple Amazon Affiliate <= 1.0.9 - Reflected Cross-Site Scripting
High
CVE-2025-1550
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Medium
CVE-2025-26929
Accounting for WooCommerce <=1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-28857
Rankchecker.io Integration <= 1.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10144
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.