EUVD-2024-36530

Malicious code in bioql PyPI...

EUVD-2025-18110

Malicious code in bioql PyPI...

CVE-2025-58193

CVE-2025-58193 refers to a Missing Authorization vulnerability in the WordPress plugin Uncanny Automator (

CVE-2025-49396

Missing Authorization vulnerability in themifyme Themify Builder themify-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Themify Builder: from n/a through = 7.6.7...

PT-2025-34349 · Wpsoul · Greenshift

Name of the Vulnerable Software and Affected Versions: Greenshift versions through 12.1.1 Description: A missing authorization flaw exists in wpsoul Greenshift, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

CVE-2025-54695

Missing Authorization vulnerability in DevItems HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through = 2.9.0...

CVE-2025-52731

Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through =...

CVE-2025-54037

Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Kit Elementor Addons: from n/a through = 1.3.4...

PT-2025-29817 · Unknown · Uxper Nuss

Name of the Vulnerable Software and Affected Versions: uxper Nuss versions n/a through 1.3.3 Description: A missing authorization issue exists in uxper Nuss, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: At the moment, there is no...

PT-2025-29745 · Smtp2Go · Smtp2Go

Name of the Vulnerable Software and Affected Versions: SMTP2GO versions n/a through 1.12.1 Description: The SMTP2GO software contains a missing authorization flaw that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

CVE-2025-0885

Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3,...

PT-2025-27885 · Unknown · Amazewp Fluxtore

Name of the Vulnerable Software and Affected Versions: amazewp fluXtore versions 1.6.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For amazewp...

PT-2025-27938 · Mobiloud · Mobiloud

Name of the Vulnerable Software and Affected Versions: MobiLoud versions n/a through 4.6.5 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a through 4.6....

CVE-2025-46259

The CVE-2025-46259 entry describes a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin The Plus Addons for Elementor Pro, affecting versions prior to 6.3.7. The issue stems from incorrectly configured access control security levels that could allow unauthorized a...

CVE-2025-53293

Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar dashboard-widget-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Widget Sidebar: from n/a through = 1.2.3...

CVE-2025-49982

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.5...

CVE-2025-49981

Missing Authorization vulnerability in mahabub81 User Roles and Capabilities user-roles-and-capabilities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Roles and Capabilities: from n/a through = 1.2.6...

PT-2025-26344 · Unknown · Wanotifier

Name of the Vulnerable Software and Affected Versions: WANotifier versions through 2.7.7 Description: The issue is related to a Missing Authorization vulnerability in WANotifier, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-26349 · Unknown · User Roles/Capabilities

Name of the Vulnerable Software and Affected Versions: mahabub81 User Roles and Capabilities versions 1.2.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

CVE-2025-23999

CVE-2025-23999 is a Missing Authorization / Broken Access Control vulnerability impacting the Breeze WordPress Cache Plugin (WordPress Breeze). Public sources confirm the affected range as Breeze versions up to and including 2.2.13. The underlying issue is an access-control misconfiguration that ...