Medium
CVE-2025-58815
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Medium
CVE-2025-58851
Boxed Content <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58820
Carousel Ultimate <= 1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-58816
Product Carousel Slider for Elementor <= 2.1.3 - Missing Authorization
Medium
CVE-2025-58802
TrustMate.io – WooCommerce integration <= 1.17.0 - Cross-Site Request Forgery
Medium
CVE-2025-58878
Woocommerce Gifts Product <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-58874
StoryMap <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58839
eDS Responsive Menu <= 1.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58855
AP HoneyPot WordPress Plugin <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-58795
Payoneer Checkout <= 3.4.0 - Missing Authorization
Medium
CVE-2025-58884
vipdrv <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58862
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58789
WP Full Stripe Free <= 8.2.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-58887
Course Booking Platform <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58818
Developer Tools Blocker <= 3.2.1 - Cross-Site Request Forgery
Medium
CVE-2025-58810
Simple Link List Widget <= 0.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58814
Stagtools <= 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58876
Aparat Video Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58831
Parallax Scrolling Enllax.js <= 0.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-58811
Ultimate Client Dash <= 4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-49364
Ludos Paradise <= 2.1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58827
Job Board Manager <= 2.1.61 - Authenticated (Job Poster+) Arbitrary Shortcode Execution
High
CVE-2025-49368
Palladio <= 1.1.10 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58835
Bonus for Woo <= 7.6.6 - Insufficient Input Validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.