CVE-2025-31909 WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apptivo Business Site CRM: from n/a through = 5.3...

CVE-2025-31909

CVE-2025-31909 – Apptivo Business Site CRM: vulnerability in the product allowing Missing Authorization to Arbitrary Content Deletion. Affected: Apptivo Business Site CRM (≤5.3). Status: Unpatched per linked documentation. CVSS v3.1 base score: 7.5 (High). No exploitation details provided in the ...

CVE-2025-31896

Technical details for CVE-2025-31896 are not provided in the supplied documents. No information on affected product/version/root cause/impact/remediation is available here; monitor for updates.

CVE-2025-31896 WordPress GetBookingsWP Plugin <= 1.1.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetBookingsWP: from n/a through = 1.1.27...

CVE-2025-31876 WordPress Payday plugin <= 3.3.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payday: from n/a through = 3.3.18...

CVE-2025-31876

CVE-2025-31876 is a Missing Authorization vulnerability in the Payday WordPress plugin. The entry states an authorization/configuration flaw that could allow access to restricted functionality due to incorrectly configured access control levels, affecting Payday versions up to 3.3.12 (the initial...

CVE-2025-31858

CVE-2025-31858 is a Missing Authorization vulnerability in the Local Magic plugin for WordPress. Connected documents indicate Local Magic versions up to 2.6.0 are affected and that the issue remains unpatched. The primary description notes a Missing Authorization configuration flaw, but the conne...

CVE-2025-31841 WordPress FPW Category Thumbnails Plugin <= 1.9.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FPW Category Thumbnails: from n/a through 1.9.5...

CVE-2025-31795

CVE-2025-31795 affects SWM – Shopify to WooCommerce Migration. Vulnerability: Missing Authorization allows unauthenticated settings updates for versions from 1.0.0 up to 1.3.0 (from Initial Description: n/a through 1.3.0). Current status: patch not present in provided docs (Unpatched). References...

CVE-2025-31746 WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...

CVE-2025-31746 WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...

CVE-2025-31794

Technical details for CVE-2025-31794 are not provided in the connected documents. The supplied materials mention a Missing Authorization issue affecting WR Price List Manager For Woocommerce up to v1.0.8, but no concrete exploit, affected build(s), root cause, impact, or fix is documented here.

CVE-2025-31789

CVE-2025-31789 is a Missing Authorization vulnerability in TextMe SMS (textme-sms-integration) by Matat Technologies. Affected product: TextMe SMS WordPress plugin (TextMe SMS integration) up to version ≤ 1.9.1. Underlying issue: broken access control enabling unauthorized actions. CVSS 3.1 base ...

CVE-2025-31758

Technical details about CVE-2025-31758 are not publicly provided in the connected documents. The initial description contains basic context but no concrete affected product versions, root cause, exploit vectors, or remediation details in the supplied materials. Monitor for updates.

CVE-2025-31736 WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rich Text Editor: from n/a through = 1.0.1...

CVE-2025-31729

CVE-2025-31729 applies to WooTumblog (WordPress). It is a Missing Authorization/Unauthorized Content Injection vulnerability affecting WooTumblog

CVE-2025-31739

Technical details for CVE-2025-31739 are not provided in the supplied documents. No product/version/impact/remediation details are available here. Monitor for updates from official advisories on Minimalistic Event Manager.

CVE-2025-31736 WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in richtexteditor Rich Text Editor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rich Text Editor: from n/a through 1.0.1...

CVE-2025-31581 WordPress WP Video Playlist plugin <= 1.1.2 - Settings Change vulnerability

Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist wp-video-playlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Video Playlist: from n/a through = 1.1.2...

CVE-2025-31581

No technical details about CVE-2025-31581 are present in the provided documents. The Initial Description notes Missing Authorization in WP Video Playlist, but lacks specifics on vulnerable component/version/impact. Monitor for official advisories for concrete data.