Medium
CVE-2025-58604
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2025-62010
Famita <= 1.54 - Unauthenticated Local File Inclusion
Medium
CVE-2025-60077
YayPricing <= 3.5.3 - Missing Authorization
High
CVE-2024-13342
Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload
Medium
CVE-2025-6255
Dynamic AJAX Product Filters for WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Medium
CVE-2025-8073
Dynamic AJAX Product Filters for WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter
High
CVE-2025-54742
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-58212
Epeken All Kurir <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52757
SUMO Memberships for WooCommerce < 7.8.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-58201
AfterShip Tracking <= 1.17.17 - Missing Authorization
Medium
CVE-2026-28132
WooCommerce Photo Reviews <= 1.4.4 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-54029
WooCommerce csv import export <= 2.0.6 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-58951
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
Medium
CVE-2025-48317
WooCommerce Payment Gateway for Saferpay <= 0.4.9 - Unauthenticated Path Traversal
Medium
CVE-2025-54713
Taxi Booking Manager for WooCommerce <= 1.3.0 - Missing Authorization
High
CVE-2025-60083
PDF Invoice Builder for WooCommerce <= 6.5.0 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-7813
Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-7827
Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2025-7642
Simpler Checkout 0.7.0 - 1.1.13 - Authentication Bypass
Medium
CVE-2025-62890
Premmerce Brands for WooCommerce <= 1.2.13 - Cross-Site Request Forgery
High
CVE-2025-60222
SUMO Memberships for WooCommerce <= 7.8.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-53348
Kalium <= 3.18.3 - Missing Authorization
Medium
CVE-2025-48358
Risk Free Cash On Delivery (COD) - WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-8618
WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.