PT-2025-15315 · Unknown · Lenve Vblog

Name of the Vulnerable Software and Affected Versions: Lenve VBlog versions up to 1.0.0 Description: A critical issue was found, affecting the configure function of the WebSecurityConfig.java file. This leads to improper access controls, allowing remote attacks. The issue has been publicly...

CVE-2025-30915

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through ...

CVE-2025-31789

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through = 1.9.1...

CVE-2025-31758

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Free Woocommerce Product Table View: from n/a through = 1.78...

CVE-2025-32252

Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Genealogy – Your Family History Website: from n/a through = 0.1.9...

CVE-2025-32219

Missing Authorization vulnerability in Syntactics, Inc. eaSYNC easync-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eaSYNC: from n/a through = 1.3.19...

CVE-2025-32258

CVE-2025-32258 describes a missing authorization issue in the WordPress plugin Simple Website Logo . The vulnerability arises from incorrectly configured access control security levels, enabling exploitation of restricted operations by unauthorized actors. The description notes the affected range...

CVE-2025-32246 WordPress 1-Click Backup & Restore Database <= 1.0.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Tim Nguyen 1-Click Backup & Restore Database allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects 1-Click Backup & Restore Database: from n/a through 1.0.3...

CVE-2025-3237

CVE-2025-3237 affects Tenda FH1202 (version 1.2.0.14(408)). The vulnerability stems from improper access control when handling the file /goform/wrlwpsset, allowing a remote attacker to exploit it. Multiple sources corroborate remote exploitation and public disclosure of the exploit. The reports d...

CVE-2025-31846

Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through = 0.18.7...

CVE-2025-31831

Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through = 1.1.7...

CVE-2025-31834

Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through = 1.2.8...

CVE-2025-31887

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

CVE-2025-31757

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Free Woocommerce Product Table View: from n/a through = 1.78...

PT-2025-14733 · Binary Carpenter · Binarycarpenter Free Woocommerce Product Table View

Name of the Vulnerable Software and Affected Versions: BinaryCarpenter Free Woocommerce Product Table View versions 1.78 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This can...

CVE-2024-54767

An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration wit...

PT-2025-14535 · Trend Micro · Trend Vision One Status

Name of the Vulnerable Software and Affected Versions: Trend Vision One Status component affected versions not specified Description: A broken access control issue was previously discovered in the Trend Vision One Status component. This could have allowed an administrator to create users who coul...

PT-2025-14536 · Trend Micro · Trend Vision One

Name of the Vulnerable Software and Affected Versions: Trend Vision One affected versions not specified Description: A broken access control issue in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change the role of the account and...

PT-2025-14534 · Trend Micro · Trend Vision One

Name of the Vulnerable Software and Affected Versions: Trend Vision One affected versions not specified Description: A broken access control issue was previously discovered in the Trend Vision One User Roles component. This could have allowed an administrator to create users who could then change...

PT-2025-14533 · Trend Micro · Trend Vision One

Name of the Vulnerable Software and Affected Versions: Trend Vision One affected versions not specified Description: A broken access control issue in the Trend Vision One User Account component could have allowed an administrator to create users who could then change the role of the account and...