CVE-2025-57971

Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through = 3.8.1...

CVE-2025-57969

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide WP Toolbar: from n/a through = 2.7...

CVE-2025-57961

Missing Authorization vulnerability in Codexpert, Inc CoDesigner woolementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoDesigner: from n/a through = 4.29...

CVE-2025-57921

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.3...

CVE-2025-53452

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

CVE-2025-57969 WordPress Hide WP Toolbar Plugin <= 2.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide WP Toolbar: from n/a through = 2.7...

CVE-2025-58004 WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DriCub: from n/a through = 2.9...

CVE-2025-58222 WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...

CVE-2025-58258

CVE-2025-58258 is a Missing Authorization issue in the WordPress plugin Lazy Blocks (Custom Block Builder). Affected: Lazy Blocks versions 4.1.0 and earlier. Root cause per the document is improper access control that allows unauthorized actions due to configured security levels. The CVE is docum...

PT-2025-38957

Name of the Vulnerable Software and Affected Versions VibeThemes WPLMS versions through 4.970 Description An authorization issue exists in VibeThemes WPLMS due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update to a version...

PT-2025-38859

Name of the Vulnerable Software and Affected Versions codepeople CP Multi View Event Calendar versions through 1.4.32 Description An authorization issue exists in codepeople CP Multi View Event Calendar due to incorrectly configured access control security levels. This allows for unauthorized...

PT-2025-38819

Name of the Vulnerable Software and Affected Versions Hide WP Toolbar versions through 2.7 Description A missing authorization issue exists in Jeremy Saxey Hide WP Toolbar, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Hide WP Toolbar to a...

PT-2025-38888

Name of the Vulnerable Software and Affected Versions Maidul Team Manager versions through 2.3.14 Description An authorization issue exists in Maidul Team Manager, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Maidul Team Manager to a versi...

PT-2025-38968

Name of the Vulnerable Software and Affected Versions Gutentor versions through 3.5.2 Description An authorization issue exists in Gutentor, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Gutentor to a version later than 3.5.2...

PT-2025-39024

Name of the Vulnerable Software and Affected Versions VPSUForm versions through 3.2.20 Description A missing authorization issue exists in Vikas Ratudi VPSUForm due to incorrectly configured access control security levels. The issue allows exploitation of these levels. Recommendations Update...

PT-2025-38952

Name of the Vulnerable Software and Affected Versions Qubely versions through 1.8.14 Description A missing authorization issue exists in Themeum Qubely, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Qubely to a version later than 1.8.14...

PT-2025-38825

Name of the Vulnerable Software and Affected Versions RadiusTheme Team versions through 5.0.6 Description An issue exists in RadiusTheme Team related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update RadiusTheme Team to a...

PT-2025-38862

Name of the Vulnerable Software and Affected Versions Alex Content Mask versions through 1.8.5.2 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations At the moment, there is...

PT-2025-39029

Name of the Vulnerable Software and Affected Versions WordPress Custom Login URL versions through 1.0.2 Description A missing authorization issue exists in Greg Winiarski Custom Login URL, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a...

PT-2025-38921

Name of the Vulnerable Software and Affected Versions nK Lazy Blocks versions through 4.1.0 Description An authorization issue exists in nK Lazy Blocks, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update nK Lazy Blocks to a version later tha...