CVE-2025-48142

Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify bookify allows Privilege Escalation.This issue affects Bookify: from n/a through = 1.0.9...

CVE-2025-48142 WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify bookify allows Privilege Escalation.This issue affects Bookify: from n/a through = 1.0.9...

CVE-2025-48142

The connected sources confirm CVE-2025-48142 affects the WordPress plugin Bookify (versions n/a through 1.0.9) and stems from an Incorrect Privilege Assignment vulnerability that enables Privilege Escalation. Reported for Bookify, Root Cause: flawed privilege handling inside the plugin’s access c...

CVE-2025-48142 WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify allows Privilege Escalation. This issue affects Bookify: from n/a through 1.0.9...

CVE-2025-48164 WordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureDash suredash allows Privilege Escalation.This issue affects SureDash: from n/a through = 1.0.3...

CVE-2025-48164

CVE-2025-48164 is a Privilege Escalation vulnerability in WordPress plugin SureDash. The issue is described as an Incorrect Privilege Assignment vulnerability affecting SureDash versions up to 1.0.3 (the exact vulnerable range listed as n/a through 1.0.3 in multiple sources). Connected documents ...

CVE-2025-48164 WordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureDash allows Privilege Escalation. This issue affects SureDash: from n/a through 1.0.3...

CVE-2025-48165 WordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Privilege Escalation.This issue affects DELUCKS SEO: from n/a through = 2.6.0...

CVE-2025-48165

CVE-2025-48165 concerns an "Incorrect Privilege Assignment" vulnerability in the WordPress plugin DELUCKS SEO (versions up to 2.6.0). Public sources consistently describe privilege escalation via misassigned privileges within the DELUCKS SEO plugin, affecting WordPress sites using the plugin thro...

CVE-2025-48165 WordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Privilege Escalation.This issue affects DELUCKS SEO: from n/a through = 2.6.0...

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

CVE-2025-53580

CVE-2025-53580 affects WordPress plugin Simple Business Directory Pro (versions before 15.6.9). Root cause: incorrect privilege assignment enabling unauthenticated privilege escalation. CVSS 3.1 vector: Network, Low attack complexity, Privileges Required: NONE; Impact: Confidentiality/Integrity/A...

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through n/a...

CVE-2025-54735 WordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Emraan Cheema CubeWP Framework allows Privilege Escalation. This issue affects CubeWP Framework: from n/a through 1.1.24...

CVE-2025-54735

CVE-2025-54735 covers CubeWP Framework (WordPress CubeWP plugin) with an incorrect privilege assignment that allows Privilege Escalation for authenticated users (Subscriber+). Affected versions are CubeWP Framework from n/a through 1.1.24. The vulnerability has been publicly disclosed and is rate...

PT-2025-34023 · WordPress · Cubewp Framework

Name of the Vulnerable Software and Affected Versions: CubeWP Framework versions n/a through 1.1.24 Description: An incorrect privilege assignment issue exists in CubeWP Framework, allowing for privilege escalation. Recommendations: Update CubeWP Framework to a version later than 1.1.24...

PT-2025-33922 · Suredash · Suredash

Name of the Vulnerable Software and Affected Versions: SureDash versions n/a through 1.0.3 Description: An incorrect privilege assignment issue exists in SureDash, allowing for privilege escalation. Recommendations: At the moment, there is no information about a newer version that contains a fix...

WordPress plugin Simple Business Directory Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2025-34014

Name of the Vulnerable Software and Affected Versions: miniOrange Custom API for WP versions through 4.2.2 Description: An incorrect privilege assignment issue in miniOrange Custom API for WP allows privilege escalation. Recommendations: Update miniOrange Custom API for WP to a version later than...

PT-2025-33923 · Unknown · Delucks Seo

Name of the Vulnerable Software and Affected Versions: DELUCKS SEO versions through 2.6.0 Description: An incorrect privilege assignment issue exists in DELUCKS SEO, allowing for privilege escalation. Recommendations: Update DELUCKS SEO to a version later than 2.6.0...