Medium
CVE-2025-59553
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-57961
CoDesigner <= 4.30 - Missing Authorization
Medium
CVE-2025-58258
Lazy Blocks <= 4.1.0 - Missing Authorization
Medium
CVE-2025-53570
DELUCKS SEO <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53464
WP Mailto Links <= 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58646
Mobi2Go <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-57919
Language Translate Widget for WordPress – ConveyThis <= 269.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58243
imEvent <= 3.4.0 - Missing Authorization
Medium
CVE-2025-59561
Smart Blocks <= 2.4 - Missing Authorization
Medium
CVE-2025-57948
Directory Pro <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58691
Genesis Club Lite <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-59574
WP Travel Engine <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58007
Hubbub Lite <= 1.35.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-57987
WP Events Manager <= 2.2.1 - Missing Authorization
Medium
CVE-2025-58012
Content Mask <= 1.8.5.3 - Authenticated (Author+) Insecure Direct Object Reference
Medium
CVE-2025-57983
BP Disable Activation Reloaded <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2025-53462
SAPO Feed <= 2.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-57969
Hide WP Toolbar <= 2.7 - Missing Authorization
Medium
CVE-2025-58242
Bg Church Memos <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-57928
AWP Classifieds <= 4.4.3 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-57986
WP Subtitle <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-58009
CP Multi View Event Calendar <= 1.4.36 - Missing Authorization
Medium
CVE-2025-57982
Advance Portfolio Grid <= 1.07.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58653
JSM file_get_contents() Shortcode <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.