Medium
CVE-2025-65621
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2025-71401
Better Auth affected by external request basePath modification DoS
High
CVE-2025-14874
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
High
CVE-2025-13516
SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated Arbitrary File Upload
High
CVE-2025-13724
VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter
High
CVE-2025-55749
XWiki Jetty Package (XJetty) allows accessing any application file through URL
Medium
CVE-2025-11726
Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification
Medium
CVE-2025-13696
Zigaform <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint
Medium
CVE-2025-13685
Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actions
Medium
CVE-2025-13140
SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion
High
CVE-2025-64775
Apache Struts is Vulnerable to DoS via File Leak
Medium
CVE-2025-12483
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-13007
WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) <= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import
Medium
CVE-2025-13606
Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure
High
CVE-2025-13387
Kadence WooCommerce Email Designer <= 1.5.17 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-63523
FeehiCMS fails to enforce server-side immutability
Medium
CVE-2025-63520
FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function
Medium
CVE-2025-63522
FeehiCMS is vulnerable to reverse tabnabbing
Medium
CVE-2025-13697
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute
High
CVE-2025-12529
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-13806
NutzBoot Incorrect Privilege Assignment vulnerability
Low
CVE-2025-13804
NutzBoot vulnerable to information disclosure
Low
CVE-2025-13805
NutzBoot vulnerable to deserialization
Medium
CVE-2025-49041
Get Cash <= 3.2.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.