CVE-2024-37517 WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.13.7...

CVE-2024-38707 WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4...

CVE-2024-38714

CVE-2024-38714 concerns WP Fast Total Search (Epsiloncool) with Missing Authorization due to incorrectly configured access control levels. Affected versions are WP Fast Total Search 1.68.232 and earlier. Public details in connected sources indicate the attack surface involves unauthorized access ...

CVE-2024-38721 WordPress EazyDocs plugin <= 2.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through 2.5.0...

CVE-2024-38733

CVE-2024-38733 refers to a Missing Authorization vulnerability in the WordPress plugin Meks Video Importer (affected: versions up to and including 1.0.12). The issue results from incorrectly configured access control, described as a Missing Authorization / Broken Access Control scenario, allowing...

CVE-2024-38774 WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through 1.5.0...

CVE-2024-39639 WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability

Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7...

CVE-2024-43118

CVE-2024-43118 is a Missing Authorization vulnerability in the WordPress plugin Hummingbird (WPMU DEV) caused by incorrectly configured access control. Connected PT Security data identifies the affected software as WPMU DEV Hummingbird versions 3.9.1 and earlier, with a remediation recommended to...

CVE-2024-43122

CVE-2024-43122 describes a Missing Authorization (Broken/Incorrect Access Control) vulnerability in the Robin image optimizer WordPress plugin, affecting version 1.6.9 and earlier. The CVE notes that exploitation requires Network access with Low attack complexity and Low privileges, with potentia...

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

CVE-2024-43143

CVE-2024-43143 is a Missing Authorization vulnerability in the WordPress plugin Registrations for the Events Calendar (Roundup WP Registrations) affecting versions from n/a through 2.12.1. The connected sources confirm a broken access control issue allowing exploitation via misconfigured authoriz...

CVE-2024-43154

CVE-2024-43154 is a Missing Authorization (broken access control) vulnerability in BracketSpace Advanced Cron Manager for WordPress, affecting debug & control up to version 2.5.9. Public sources indicate this plugin allows unauthorized access due to misconfigured access controls. Remediation from...

CVE-2024-43215

CVE-2024-43215 corresponds to a Missing Authorization vulnerability in Creativemotion Social Slider Feed for WordPress. Technical detail in connected PT-2024-30378 shows that versions through 2.2.2 are affected by broken access control enabling exploitation via misconfigured authorization. The re...

CVE-2024-43223

CVE-2024-43223 is a Missing Authorization vulnerability in EventPrime (WordPress plugin) affecting EventPrime versions up to 4.0.3.2. Public docs confirm susceptibility due to misconfigured access control, with several sources noting the issue and a patch/update exists (4.0.3.2+). Impact is descr...

CVE-2024-43229 WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...

CVE-2024-43273

CVE-2024-43273 involves Icegram Collect (WordPress plugin) with a Missing Authorization vulnerability in access control for versions up to and including 1.3.14. Public sources in connected docs identify it as a broken/incorrectly configured authorization issue that can enable unauthorized access ...

CVE-2024-43293

CVE-2024-43293 is a Missing Authorization vulnerability in the WPZOOM Recipe Card Blocks for Gutenberg & Elementor plugin (affected:

CVE-2024-43298 WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5...

CVE-2024-43314

CVE-2024-43314 affects WordPress Asset CleanUp: Page Speed Booster (versions up to 1.3.9.3). Root cause: Missing/Incorrectly configured access control (Missing Authorization) enabling unauthorized access to assets. Impact: High (as per NVD CVSS 3.1 base score 8.8, high confidentiality, integrity,...

CVE-2024-43932

A Missing Authorization vulnerability exists in the POSIMYTH The Plus Addons for Elementor Page Builder Lite WordPress plugin, affecting versions 5.6.2 and earlier . The flaw stems from incorrectly configured access control security levels , which could allow for unauthorized actions. While the d...