Medium
CVE-2025-39593
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-39522
Dynamic Post <= 5.03 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-39528
Rescue Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-39601
Custom CSS, JS & PHP <= 2.4.1 - Cross-Site Request Forgery to Remote Code Exectuiron
Medium
CVE-2025-39563
Conditional Payments for WooCommerce <= 3.3.0 - Cross-Site Request Forgery
High
CVE-2025-39471
Modal Survey <= 2.0.2.0.1 - Unauthenticated SQL Injection
Medium
CVE-2025-39547
Internal Link Optimiser <= 5.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-39517
Basic Interactive World Map <= 2.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-39585
Travelfic Toolkit <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39566
Hostel <= 1.1.5.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-39557
Kadence WooCommerce Email Designer <= 1.5.14 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-39589
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-39574
Uix Shortcodes <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-39584
Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-39575
WPCasa <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39576
WPAdverts <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-39587
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection
Medium
CVE-2025-39578
Responsive Blocks <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39520
Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39573
WP Posts Carousel <= 1.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3453
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-39530
Site Search 360 <= 2.1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-39579
Membership For WooCommerce <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39515
Attendance Manager <= 0.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.