Critical
CVE-2025-11127
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-11927
Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.14 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-11740
wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection
Medium
CVE-2025-11928
CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-12171
RESTful Content Syndication 1.1.0 - 1.5.0 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2025-12118
Schema Scalpel <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema
Medium
CVE-2025-6988
Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-6990
Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-64367
Groundhogg <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-11377
List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure
High
CVE-2025-10487
Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution
Medium
CVE-2025-64264
Popup addon for Ninja Forms <= 3.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-64632
Google XML Sitemaps <= 4.1.22 - Missing Authorization
Critical
CVE-2025-11499
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-62265
Liferay Portal is vulnerable to XSS in the Blogs widget
Medium
CVE-2025-12041
ERI File Library <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download
Medium
CVE-2025-8383
Depicter <= 4.0.4 - Cross-Site Request Forgery
High
CVE-2025-10897
WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read
Critical
CVE-2025-5397
Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass
High
CVE-2025-7846
WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function
Medium
CVE-2025-62266
Liferay Portal is vulnerable to DNS rebinding attacks
High
CVE-2025-64112
Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation
Medium
CVE-2025-64118
node-tar has a race condition leading to uninitialized memory exposure
High
CVE-2025-62726
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.