245 matches found
CVE-2024-54310: Missing Authorization
Missing Authorization vulnerability in Aslam Khan Gouran Gou Manage My Account Menu gou-wc-account-tabs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Gou Manage My Account Menu: from n/a through = 1.0.1.8...
CVE-2024-54278: Missing Authorization
Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects News Ticker for Elementor: from n/a through = 2.1.3...
CVE-2024-54256: Missing Authorization
Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Easy Blocks pro: from n/a through = 1.0.21...
CVE-2024-53795: Missing Authorization
Missing Authorization vulnerability in andymoyle Church Admin church-admin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Church Admin: from n/a through = 5.0.8...
CVE-2024-53810: Missing Authorization
Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Simple User Registration: from n/a through = 5.5...
CVE-2024-53826: Missing Authorization
Missing Authorization vulnerability in WPSight WPCasa wpcasa allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPCasa: from n/a through = 1.2.13...
CVE-2024-43323
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28...
CVE-2024-43341
Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...
CVE-2024-43219
Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6...
CVE-2024-38744
Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0...
CVE-2024-37510
CVE-2024-37510 concerns WordPress plugin Charitable (Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress) with versions up to 1.8.1.7. The root cause is a missing authorization check that allows users to access functionality not constrained by ACLs. The vulnerabil...
CVE-2024-43159
CVE-2024-43159 is a Missing Authorization vulnerability in WordPress Masteriyo LMS plugin affecting versions up to 1.11.6. Public details describe that access to functionality is not properly constrained by ACLs, enabling unauthorized access. Available connected sources consistently state the iss...
CVE-2024-43979
CVE-2024-43979 is a Missing Authorization vulnerability in CozyThemes Blockbooster for WordPress. The flaw affects Blockbooster versions
CVE-2024-43998
CVE-2024-43998 : Blogpoet theme has a Missing Authorization (ACL) vulnerability that lets an unauthenticated actor access functions not properly constrained by ACLs in Blogpoet versions n/a–1.0.3. The credible connected documents describe the root cause as missing authorization around plugin/feat...
CVE-2024-47321
CVE-2024-47321 affects WordPress WP Datepicker
CVE-2024-43929: Missing Authorization
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4...
CVE-2024-43341: Missing Authorization
Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...
CVE-2024-37463: Missing Authorization
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5...
CVE-2024-38702: Missing Authorization
Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2...
CVE-2024-37510: Missing Authorization
Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Charitable: from n/a through 1.8.1.7...