Medium
CVE-2025-68494
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-62762
SMTP Mail <= 1.3.49 - Cross-Site Request Forgery
Medium
CVE-2025-63008
ERP <= 1.16.7 - Missing Authorization
Medium
CVE-2025-62737
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Medium
CVE-2025-49348
Hype <= 1.0.5 - Missing Authorization
Medium
CVE-2025-62994
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-63025
Xagio SEO <= 7.1.0.37 - Missing Authorization
Medium
CVE-2025-62734
Media Library Downloader <= 1.4.0 - Cross-Site Request Forgery
Medium
CVE-2025-63015
WooCommerce Payment Gateway – Paysera <= 3.10.0 - Missing Authorization
Medium
CVE-2025-66083
WpEvently <= 5.0.4 - Missing Authorization
Low
CVE-2025-65345
alexusmai laravel-file-manager is vulnerable to Directory Traversal
High
CVE-2024-3884
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded
Medium
CVE-2025-66404
mcp-server-kubernetes has potential security issue in exec_in_pod tool
Critical
ghsa-fmh4-wr37-44fp
React Server Components are Vulnerable to RCE
Critical
Exploited in attacks
CVE-2025-55182
React Server Components are Vulnerable to RCE
Critical
ghsa-9qr9-h5gf-34mp
Next.js is vulnerable to RCE in React flight protocol
Unrated
CVE-2025-13986
drupal/disable_login - SA-CONTRIB-2025-124
Unrated
CVE-2025-13985
drupal/entity_share - SA-CONTRIB-2025-123
Unrated
CVE-2025-13984
drupal/next - SA-CONTRIB-2025-122
Unrated
CVE-2025-13983
drupal/tagify - SA-CONTRIB-2025-121
Unrated
CVE-2025-13982
drupal/login_time_restriction - SA-CONTRIB-2025-120
Unrated
CVE-2025-13981
drupal/ai - SA-CONTRIB-2025-119
Unrated
CVE-2025-13980
drupal/ckeditor5_premium_features - SA-CONTRIB-2025-118
Unrated
CVE-2025-13979
drupal/minisite - SA-CONTRIB-2025-117
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.