3647 matches found
CVE-2025-47688 WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability
Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through = 5.3.1...
CVE-2025-47628 WordPress QS Dark Mode plugin <= 3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in quomodosoft QS Dark Mode qs-dark-mode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QS Dark Mode: from n/a through = 3.0...
CVE-2025-47612 WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability
Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...
CVE-2025-47528
CVE-2025-47528 affects Ovation Elements (WordPress plugin) with versions <= 1.1.2. The issue is a Missing Authorization (broken access control) vulnerability that could allow access level misconfigurations. CVSSv3.1 base score is 4.3 (Medium). Connected sources indicate Ovation Elements
CVE-2025-47485 WordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control Vulnerability
Missing Authorization vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through = 2.1.22...
CVE-2025-47471
CVE-2025-47471 concerns Envo Extra (WordPress)
CVE-2025-47472 WordPress Music Player for WooCommerce <= 1.5.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in codepeople Music Player for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Music Player for WooCommerce: from n/a through 1.5.1...
CVE-2025-47472 WordPress Music Player for WooCommerce plugin <= 1.5.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Player for WooCommerce: from n/a through = 1.5.1...
CVE-2025-47469 WordPress Media Hygiene plugin <= 4.0.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Hygiene: from n/a through = 4.0.0...
CVE-2025-47467
CVE-2025-47467 relates to a Missing Authorization vulnerability in WordPress GS Testimonial Slider (GS Testimonial Slider
CVE-2025-47465 WordPress Blocksy <= 2.0.97 - Broken Access Control Vulnerability
Missing Authorization vulnerability in CreativeThemes Blocksy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Blocksy: from n/a through 2.0.97...
WordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Graphina versions = 3.0.4...
WordPress Envo Extra plugin <= 1.9.9 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Envo Extra versions = 1.9.9...
CVE-2025-20966
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...
CVE-2025-20970
Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege...
PT-2025-20231 · Unknown · Contentstudio
Name of the Vulnerable Software and Affected Versions: ContentStudio versions 1.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For ContentStudio...
WordPress Login Lockdown & Protection plugin <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary IP Whitelisting vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Login Lockdown versions = 2.11...
CVE-2025-46587
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...