Medium
CVE-2025-58656
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-58269
WP Project Manager <= 2.6.25 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-57916
WP System Information <= 1.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-57923
UK Address Postcode Validation <= 3.9.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-58226
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.16 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-58252
Getwid <= 2.1.2 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-57937
WPeMatico RSS Feed Fetcher <= 2.8.10 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-59570
Mail Mint <= 1.18.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-58007
Hubbub Lite <= 1.35.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-53468
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-58659
Helpie FAQ <= 1.45 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-58686
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-10002
ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection
Medium
CVE-2025-10652
Robcore Netatmo <= 1.7 - Authenticated (Contributor+) SQL Injection via robcore-netatmo Shortcode
Medium
CVE-2025-10635
Find Me On <= 2.0.9.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-9203
Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Fields
Medium
CVE-2025-10042
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
Medium
CVE-2025-9808
The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure
Medium
CVE-2025-62895
Atarim <= 4.2.1 - Unauthenticated Information Exposure
Medium
CVE-2025-59003
Multiple Plugins and Themes by inkthemes <= 1.1.8 - Unauthenticated Information Exposure
High
CVE-2025-9807
The Events Calendar <= 6.15.1 - Unauthenticated SQL Injection
Medium
CVE-2025-64351
Rank Math SEO <= 1.0.252.1 - Authenticated (Subscriber+) Information Exposure
High
CVE-2025-9587
CTL Behance Importer Lite <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-64350
Rank Math SEO <= 1.0.252.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.