Medium
CVE-2025-58635
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 281
Reset filters
Medium
CVE-2025-9111
AI ChatBot for WordPress <= 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-15659
Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49893
Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7499
BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
High
CVE-2025-7847
AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-7780
AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
Medium
CVE-2025-50029
AI Tools <= 4.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-5570
AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Medium
CVE-2025-24735
Chatra Live Chat + ChatBot + Cart Saver <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-23968
Graphina <= 3.1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-6238
AI Engine 2.8.4 - Insecure OAuth Implementation
Medium
CVE-2025-53200
ChatBot <= 6.7.3 - Missing Authorization
High
CVE-2025-6206
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-5071
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP
High
CVE-2025-5018
Hive Support <= 1.2.5 - Authenticated (Subscriber+) Missing Authorization via hs_update_ai_chat_settings and hive_lite_support_get_all_binbox
Medium
CVE-2025-5019
Hive Support <= 1.2.5 - Cross-Site Request Forgery via hs_update_ai_chat_settings Function
Medium
CVE-2025-30977
WP Live Chat + Chatbots Plugin for WordPress – Chaport <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-60223
WPBot Pro Wordpress Chatbot <= 13.6.5 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-3812
WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-47582
WPBot Pro Wordpress Chatbot <= 12.7.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-47470
GPT3 AI Content Writer <= 1.9.14 - Cross-Site Request Forgery
Medium
CVE-2025-32635
Hive Support <= 1.2.6 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-32666
Hive Support <= 1.2.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.