Medium
CVE-2025-58643
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-58625
WP Flow Plus <= 5.2.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-58618
Pie Calendar <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58606
SaasLauncher <= 1.3.0 - Missing Authorization
High
CVE-2025-57889
InPost Gallery <= 2.1.4.5 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-58605
WP Delicious <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58607
Cookie Notice & Consent Banner for GDPR & CCPA Compliance <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-48338
Abstracts <= 2.7.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62012
TheGem (Elementor) <= 5.10.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-58609
Latest Post Shortcode <= 14.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58624
Exchange Rates <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58597
wpForo Forum <= 2.4.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-58613
Posts Table with Search & Sort <= 1.4.10 - Missing Authorization
Medium
CVE-2025-58616
Frisbii Pay <= 1.8.2.1 - Missing Authorization
High
CVE-2025-9519
Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode
High
CVE-2025-9517
atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2025-62011
TheGem <= 5.10.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-58602
If-So Dynamic Content Personalization <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58631
IssueM <= 2.9.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-58614
Tooltipy <= 5.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58612
PropertyHive <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-58608
MediaPress <= 1.5.9.1 - Authenticated (Contributor+) Local File Inclusion
Low
CVE-2025-58598
Klarna Order Management for WooCommerce <= 1.9.8 - Authenticated (Shop Manager+) Information Disclosure via Log Files
Medium
CVE-2025-58603
Surfer <= 1.6.4.574 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.