Critical
CVE-2025-8489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-64358
Smart Coupons for WooCommerce <= 2.2.3 - Missing Authorization
Medium
CVE-2025-67599
WebToffee eCommerce Marketing Automation <= 2.1.1 - Missing Authorization
Medium
CVE-2025-66085
Arconix Shortcodes <= 2.1.18 - Missing Authorization
Medium
CVE-2025-64204
SmartMag <= 10.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-66112
Accessibility Toolkit by WebYes <= 2.0.4 - Missing Authorization
Medium
CVE-2025-12502
Attention Bar <= 0.7.2.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-64364
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-12521
Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
Medium
CVE-2025-66097
I Order Terms <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2025-64362
K Elements < 5.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-64363
Kleo < 5.5.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-64208
Jannah - Extensions <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64382
Order Export & Order Import for WooCommerce <= 2.6.7 - Missing Authorization
Medium
CVE-2025-66089
Product Feed for WooCommerce <= 2.3.1 - Missing Authorization
Medium
ghsa-grjp-54v3-c442
OpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability
Medium
CVE-2025-13327
A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that e
Critical
CVE-2025-64095
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
Medium
CVE-2025-64094
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
Medium
CVE-2025-62802
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
High
CVE-2025-11200
MLflow Weak Password Requirements Authentication Bypass Vulnerability
High
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
High
CVE-2025-60542
TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update
High
ghsa-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.