Medium
CVE-2025-58786
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Medium
CVE-2025-58838
Smooth Accordion <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58861
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Medium
CVE-2025-58806
Error Monitoring by Bugsnag <= 1.6.3 - Cross-Site Request Forgery
High
CVE-2025-49359
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58813
Consultstreet <= 3.0.0 - Missing Authorization
Medium
CVE-2025-8360
LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-58787
Themify Popup <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58812
Best Restaurant Menu by PriceListo <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58853
Popping Sidebars and Widgets Light <= 1.27 - Cross-Site Request Forgery
Medium
CVE-2025-58801
Responder <= 4.3.8 - Cross-Site Request Forgery
Medium
CVE-2025-58829
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.3.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-58833
Invelity MyGLS connect <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2025-58837
SS Font Awesome Icon <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-7040
Cloud SAML SSO <= 1.0.19 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action
High
CVE-2025-49365
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58790
Kiwi <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58850
Showpass WordPress Extension <= 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58881
New Simple Gallery <= 8.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-58784
ARI Fancy Lightbox <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-58866
Site Info <= 1.1 - Authenticated (Editor+) Information Exposure
Medium
CVE-2025-58868
SimaCookie <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58865
Compact Admin <= 1.3.0 - Cross-Site Request Forgery
Medium
CVE-2025-58842
Donation Forms WP by Givecloud <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.