Medium
CVE-2025-59010
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-53234
UDesign Core <= 4.14.0 - Reflected Cross-Site Scripting
High
CVE-2025-62016
Kallyas <= 4.22.0 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2025-53236
UDesign Core <= 4.14.0 - Missing Authorization
Medium
CVE-2025-59011
Travel Booking WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-59012
Travel Booking WordPress Theme < 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-6757
Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode
Medium
CVE-2025-8564
SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-9493
Admin Menu Editor <= 1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder Parameter
Medium
CVE-2025-8149
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2025-9126
Smart Table Builder <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2025-9442
StreamWeasels Kick Integration <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter
Medium
CVE-2025-8722
Content Views <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets
Medium
CVE-2025-9853
Optio Dentistry <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6067
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2025-9849
Html Social share buttons <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-7366
Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
Medium
CVE-2025-7368
Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure
Medium
CVE-2025-58845
Bulk Watermark <= 1.6.10 - Cross-Site Request Forgery
Medium
CVE-2025-58886
Instant Locations <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58785
Ray Enterprise Translation <= 1.7.1 - Missing Authorization
Medium
CVE-2025-58882
Simple Text Slider <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58822
WP Mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58872
Simple Price Calculator <= 1.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.