Medium
CVE-2025-58817
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-58805
Widgetize Pages Light <= 3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58846
WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule <= 2020.1.0 - Cross-Site Request Forgery
Medium
CVE-2025-58826
WP Publication Archive <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7045
Cloud SAML SSO <= 1.0.19 - Missing Authorization to Unauthenticated Identity Provider Deletion via delete_config Action
High
CVE-2025-49363
Kings & Queens <= 1.1.16 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58807
Purge Varnish Cache <= 2.6 - Cross-Site Request Forgery
Medium
CVE-2025-58870
WP-GraphViz <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58786
Ibtana – Ecommerce Product Addons <= 0.4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58838
Smooth Accordion <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58861
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Medium
CVE-2025-58806
Error Monitoring by Bugsnag <= 1.6.3 - Cross-Site Request Forgery
High
CVE-2025-49359
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58813
Consultstreet <= 3.0.0 - Missing Authorization
Medium
CVE-2025-8360
LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-58787
Themify Popup <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58812
Best Restaurant Menu by PriceListo <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58853
Popping Sidebars and Widgets Light <= 1.27 - Cross-Site Request Forgery
Medium
CVE-2025-58801
Responder <= 4.3.8 - Cross-Site Request Forgery
Medium
CVE-2025-58829
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.3.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-58833
Invelity MyGLS connect <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2025-58837
SS Font Awesome Icon <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-7040
Cloud SAML SSO <= 1.0.19 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action
High
CVE-2025-49365
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.