CVE-2025-39545

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress REST API Authentication: from n/a through = 3.6.3...

PT-2025-17498 · Unknown · Download Alt Text Ai

Name of the Vulnerable Software and Affected Versions: Download Alt Text AI versions 1.9.93 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions...

CVE-2025-32593

Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Product Frontend for WooCommerce: from n/a through = 1.0.8...

CVE-2025-24581

Missing Authorization vulnerability in Themefic Instantio instantio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instantio: from n/a through = 3.3.7...

CVE-2025-23906 WordPress WordPress Dashboard Tweeter plugin <= 1.3.2 - Settings Change vulnerability

Missing Authorization vulnerability in wpseek WordPress Dashboard Tweeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Dashboard Tweeter: from n/a through 1.3.2...

CVE-2025-24581 WordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability

Missing Authorization vulnerability in Themefic Instantio instantio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instantio: from n/a through = 3.3.7...

CVE-2025-39583 WordPress BERTHA AI plugin <= 1.12.10.2 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.12.10.2...

CVE-2025-3617

CVE-2025-3617 concerns the Rockwell Automation ThinManager product. The public materials describe a local privilege-escalation issue caused during startup when files in the temporary folder are deleted, causing the directory’s Access Control Entry to inherit permissions from the parent directory,...

CVE-2025-32212

Missing Authorization vulnerability in Specia Theme Specia Companion specia-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specia Companion: from n/a through = 6.3...

CVE-2025-32240

Missing Authorization vulnerability in wpvsingh Site Notify site-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Notify: from n/a through = 1.0...

CVE-2025-32244 WordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud SEO Help seo-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Help: from n/a through = 6.7.9...

CVE-2025-32208

CVE-2025-32208 (Hive Support WordPress plugin) is supported by connected documents as a real vulnerability, not a placeholder. The Hive Support plugin (WordPress) is affected by a missing authorization/capability check in functions hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox...

PT-2025-15945 · Unknown · Specia Companion +1

Name of the Vulnerable Software and Affected Versions: Specia Companion versions n/a through 4.6 Description: The issue is related to a Missing Authorization vulnerability in Specia Theme Specia Companion, which allows exploiting incorrectly configured access control security levels...

PT-2025-15739 · Unknown · Woo Product Feed For Marketing Channels

Name of the Vulnerable Software and Affected Versions: Woo Product Feed For Marketing Channels versions 1.9.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

CVE-2025-30288 ColdFusion | Improper Access Control (CWE-284)

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code...

PT-2025-15657 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0, 2023.12, 2021.18 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

PT-2025-15648 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4 through 2.4.8-beta2 and earlier Description: The issue is related to an improper access control vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to...

CVE-2025-32235

Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through = 5.9.4...

CVE-2025-32147

Missing Authorization vulnerability in coothemes Easy WP Optimizer easy-wp-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy WP Optimizer: from n/a through = 1.1.0...

CVE-2025-32234

CVE-2025-32234 : Missing/incorrect Authorization in the AdMail – Multilingual Back in-Stock Notifier for WooCommerce WordPress plugin, affecting from n/a through 1.7.0. Underlying issue is misconfigured access control; CVSS 3.1 base score 4.3 (Medium). No public exploit details or fixes are provi...