Medium
CVE-2025-58610
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-58601
Classified Listing <= 5.0.6 - Missing Authorization
Medium
CVE-2025-9516
atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Read
High
CVE-2025-58637
immonex Kickstart <= 1.11.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-58642
LTL Freight Quotes – Day & Ross Edition <= 2.1.11 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58622
Mobile Contact Line <= 2.4.0 - Missing Authorization
High
CVE-2025-10269
Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-58630
Simple Matomo Tracking Code <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58635
Support Genix <= 1.4.23 - Missing Authorization
Medium
CVE-2025-58600
Paid Member Subscriptions <= 2.15.9 - Missing Authorization
Medium
CVE-2025-58620
PDF for WPForms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58626
RumbleTalk Live Group Chat <= 6.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53307
WordPress Assistant <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-58632
Dadevarzan WordPress Common <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-9518
atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2025-58604
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-58594
Brizy <= 2.7.12 - Missing Authorization
High
CVE-2025-49401
Quiz And Survey Master <= 10.2.5 - Unauthenticated PHP Object Injection
Medium
CVE-2025-58611
Tickera <= 3.5.5.6 - Cross-Site Request Forgery
Medium
CVE-2025-58593
Orbit Fox by ThemeIsle <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58633
Booking Ultra Pro <= 1.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-58641
Exit Intent Popup <= 1.0.1 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-58358
mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool
High
CVE-2025-71417
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.