Medium
CVE-2025-58829
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-58833
Invelity MyGLS connect <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2025-58837
SS Font Awesome Icon <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-7040
Cloud SAML SSO <= 1.0.19 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action
High
CVE-2025-49365
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58790
Kiwi <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58850
Showpass WordPress Extension <= 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58881
New Simple Gallery <= 8.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-58784
ARI Fancy Lightbox <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-58866
Site Info <= 1.1 - Authenticated (Editor+) Information Exposure
Medium
CVE-2025-58868
SimaCookie <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58865
Compact Admin <= 1.3.0 - Cross-Site Request Forgery
Medium
CVE-2025-58842
Donation Forms WP by Givecloud <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58815
Aitasi Coming Soon <= 2.0.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58851
Boxed Content <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58820
Carousel Ultimate <= 1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-58816
Product Carousel Slider for Elementor <= 2.1.3 - Missing Authorization
Medium
CVE-2025-58802
TrustMate.io – WooCommerce integration <= 1.17.0 - Cross-Site Request Forgery
Medium
CVE-2025-58878
Woocommerce Gifts Product <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-58874
StoryMap <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58839
eDS Responsive Menu <= 1.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58855
AP HoneyPot WordPress Plugin <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-58795
Payoneer Checkout <= 3.4.0 - Missing Authorization
Medium
CVE-2025-58884
vipdrv <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.