CVE-2025-32232 WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in ERA404 StaffList stafflist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaffList: from n/a through = 3.2.7...

CVE-2025-31820

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.4...

CVE-2025-31876 WordPress Payday plugin <= 3.3.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payday: from n/a through = 3.3.18...

CVE-2025-31746

Technical details for CVE-2025-31746 (Think201 Clients plugin) are not provided in the supplied documents. No confirmed affected products, root cause, or remediation are disclosed here; monitor official advisories and feeds for updates.

CVE-2025-31758

Technical details about CVE-2025-31758 are not publicly provided in the connected documents. The initial description contains basic context but no concrete affected product versions, root cause, exploit vectors, or remediation details in the supplied materials. Monitor for updates.

CVE-2025-31541 WordPress TuriTop Booking System plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in turitop TuriTop Booking System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects TuriTop Booking System: from n/a through 1.0.10...

PT-2025-14709 · Enituretechnology · Enituretechnology Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology Small Package Quotes – Worldwide Express Edition versions 5.2.19 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security...

PT-2025-14742 · Unknown · Local Magic

Name of the Vulnerable Software and Affected Versions: matthewrubin Local Magic versions n/a through 2.6.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2025-14754 · Apptivo · Apptivo Business Site Crm

Name of the Vulnerable Software and Affected Versions: Apptivo Business Site CRM versions n/a through 5.3 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For Apptivo...

CVE-2025-31528

Missing Authorization vulnerability in wokamoto StaticPress staticpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaticPress: from n/a through = 0.4.5...

CVE-2025-31846

Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through = 0.18.7...

CVE-2025-31826

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

CVE-2025-31886 WordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through = 5.21...

CVE-2025-31816 WordPress Mobile App Canvas Plugin <= 3.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

CVE-2025-31799 WordPress Publitio plugin <= 2.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through = 2.1.8...

CVE-2025-31777

CVE-2025-31777 concerns Clockinator Lite (BeastThemes) with Missing Authorization affecting Clockinator Lite versions up to 1.0.7. The Wordfence vulnerability entry in the connected docs confirms the affected software and the Missing Authorization issue, but detailed root-cause, impacted configur...

CVE-2025-30797

CVE-2025-30797: Missing Authorization in Greek Multi Tool (WordPress plugin) – affects Greek Multi Tool – Ultimate Greek Language Toolkit up to version 2.3.1. Root cause is Incorrectly Configured Access Control, enabling unauthorized actions via network access with no privileges required; CVSS v3...

PT-2025-14243 · Woocommerce · Shipdepot For Woocommerce

Name of the Vulnerable Software and Affected Versions: ShipDepot for WooCommerce versions 1.2.19 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For ShipDepot fo...

PT-2025-14080 · Yayextra · Yayextra

Name of the Vulnerable Software and Affected Versions: YayExtra versions 1.5.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For YayExtra versions 1.5.2 a...

CVE-2025-31544

Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Swiss Toolkit For WP: from n/a through = 1.4.5...