Medium
CVE-2025-57970
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-53465
GSheets Connector <= 1.1.1 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-57925
immonex Kickstart Team <= 1.6.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-53450
Easy Pricing Table WP <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-59570
Mail Mint <= 1.18.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-58957
VPSUForm <= 3.2.20 - Missing Authorization
Medium
CVE-2025-53464
WP Mailto Links <= 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-57919
Language Translate Widget for WordPress – ConveyThis <= 269.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-53454
Ultimate WP Mail <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58018
Mail Subscribe List <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58650
All In One SEO Pack <= 4.8.7.1 - Missing Authorization
High
CVE-2025-59588
Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-57971
SALESmanago <= 3.8.1 - Missing Authorization
High
CVE-2025-64266
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-53428
Simple User Registration <= 6.4 - Authenticated (Contributor+) Privilege Escalation
High
CVE-2025-53425
Dokan <= 4.1.3 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2025-9887
Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-10489
SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation
Medium
CVE-2025-10658
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover
Critical
CVE-2025-5948
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
Medium
CVE-2025-8487
Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
High
CVE-2025-8565
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation
High
CVE-2025-58995
Leblix <= 2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-10493
Chained Quiz <= 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.