Medium
CVE-2025-58635
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-58600
Paid Member Subscriptions <= 2.15.9 - Missing Authorization
Medium
CVE-2025-58620
PDF for WPForms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58626
RumbleTalk Live Group Chat <= 6.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53307
WordPress Assistant <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-58632
Dadevarzan WordPress Common <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-9518
atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2025-58604
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-58594
Brizy <= 2.7.12 - Missing Authorization
High
CVE-2025-49401
Quiz And Survey Master <= 10.2.5 - Unauthenticated PHP Object Injection
Medium
CVE-2025-58611
Tickera <= 3.5.5.6 - Cross-Site Request Forgery
Medium
CVE-2025-58593
Orbit Fox by ThemeIsle <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58633
Booking Ultra Pro <= 1.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-58641
Exit Intent Popup <= 1.0.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-9260
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
Medium
CVE-2025-8282
SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-53445
Catwalk <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2025-58945
EcoGrow <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-53448
Rally <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-58803
Algenix <= 1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48103
Today's Date Inserter <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-58893
Alright <= 1.6.1 - Unauthenticated Local File Inclusion
High
CVE-2025-53449
Convex <= 1.11 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48105
Easy Flash Embed <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.