Low
CVE-2025-14550
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Low
CVE-2025-13473
Django has Observable Timing Discrepancy
High
CVE-2025-67853
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
Medium
CVE-2025-67856
Moodle has an authorization logic flaw
Medium
CVE-2025-67855
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2025-67857
Moodle Inserts Sensitive Information Into Sent Data
Low
CVE-2025-67852
Moodle Open Redirect vulnerability
High
CVE-2025-67848
Moodle authentication bypass vulnerability
High
CVE-2025-67849
Moodle Cross-site Scripting (XSS) vulnerability
High
CVE-2025-67850
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2025-67851
Moodle formula injection vulnerability
Medium
CVE-2026-1755
Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-70960
A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Medium
CVE-2025-70959
A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Medium
CVE-2025-70958
Subrion CMS vulnerable to cross-site scripting
High
CVE-2025-69372
SevenHills <= 1.6.2 - Unauthenticated PHP Object Injection
Medium
CVE-2026-24941
WP Job Portal <= 2.4.4 - Missing Authorization
High
CVE-2025-15386
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-24943
Grand Conference <= 5.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2026-39605
Super Custom Login <= 1.1 - Missing Authorization
Medium
CVE-2026-24946
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Missing Authorization
High
CVE-2026-24949
PhotoMe <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-67624
Optimize More! – Images <= 1.1.3 - Missing Authorization
Medium
CVE-2026-24950
Authorsy <= 1.0.6 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.