Medium
CVE-2025-58982
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2025-10690
Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
High
CVE-2025-9539
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
Medium
CVE-2025-9542
AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
High
CVE-2025-60213
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
Medium
CVE-2025-58822
WP Mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49362
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion
High
CVE-2025-49360
Militarology <= 1.0.15 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48102
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58800
WP Email Template <= 2.8.6 - Cross-Site Request Forgery
High
CVE-2025-49367
Monyxi <= 1.1.8 - Unauthenticated Local File Inclusion
High
CVE-2025-49361
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
High
CVE-2025-49371
Strux <= 1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-9085
User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection
High
CVE-2025-49369
Lettuce <= 1.1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-49363
Kings & Queens <= 1.1.16 - Unauthenticated Local File Inclusion
High
CVE-2025-49359
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58829
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.3.9 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-49365
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58815
Aitasi Coming Soon <= 2.0.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58839
eDS Responsive Menu <= 1.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58862
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49364
Ludos Paradise <= 2.1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-49368
Palladio <= 1.1.10 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.