Medium
CVE-2025-59593
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2025-59559
Payrexx Payment Gateway for WooCommerce <= 3.1.5 - Missing Authorization
Medium
CVE-2025-57942
Emergency Password Reset <= 9.3 - Cross-Site Request Forgery
Medium
CVE-2025-59565
Upsell Order Bump Offer for WooCommerce <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58233
SQL Chart Builder <= 2.3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-59585
Penci Recipe <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58021
List Child Pages Shortcode <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58235
Front End Users <= 3.2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-57955
Post Carousel Slider for Elementor <= 1.7.0 - Missing Authorization
High
CVE-2025-58005
DriCub <= 2.9 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-58028
Designil PDPA Thailand <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-57905
AgreeMe Checkboxes For WooCommerce <= 1.1.3 - Cross-Site Request Forgery
Medium
CVE-2025-57909
Editor Custom Color Palette <= 3.4.8 - Missing Authorization
Medium
CVE-2025-59587
Penci Shortcodes & Performance < 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58031
Nextend Facebook Connect <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53469
BMI Adult & Kid Calculator <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58246
WordPress <= 6.8.2 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-58004
DriCub <= 2.9 - Missing Authorization
Medium
CVE-2025-57930
Double the Donation <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-58974
WPComplete <= 2.9.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58237
LC Wizard <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58656
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-58266
Gianism <= 6.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-58673
WP User Frontend <= 4.1.12 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.