High
CVE-2025-66631
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-65849
Altcha Proof-of-Work obfuscation mode cryptanalytic break
Critical
CVE-2025-65964
n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
Critical
CVE-2025-65548
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by t
Medium
CVE-2025-66578
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation
High
CVE-2025-13604
Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL
Medium
CVE-2025-66202
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Medium
CVE-2025-13924
Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.17 - Cross-Site Request Forgery to Product Field Group Duplication and Publication
Medium
CVE-2025-63058
Custom Field Template <= 2.7.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12558
Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-62109
Geo Controller <= 8.9.5 - Unauthenticated Information Exposure
Medium
CVE-2025-62871
Just TinyMCE Custom Styles <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2025-62872
Social Photo Fetcher <= 3.0.4 - Cross-Site Request Forgery
Medium
CVE-2025-13958
YaMaps <= 0.6.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-66096
Table Block by Tableberg <= 0.6.9 - Missing Authorization
Medium
CVE-2025-62740
WP-CRM System <= 3.4.6 - Missing Authorization
Medium
CVE-2025-62873
Flashy Marketing Automation <= 2.0.8 - Cross-Site Request Forgery
Medium
CVE-2025-62870
Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization
High
CVE-2025-12705
Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews
Medium
CVE-2025-67468
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.6 - Missing Authorization
Medium
CVE-2025-63034
Page View Count <= 2.9.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-62997
EasyCart <= 5.8.11 - Unauthenticated Information Exposure
Medium
CVE-2025-13642
ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-62998
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.